OGO Security - Notice history

• Experimental detection of abusive 2FA OTP attempts to mitigate fraud.

• Expanded SQLi detection scope for improved coverage.

• Added artifacts to existing drives.

• New virtual patch Next.js CVE-2024-46982

• New virtual patch Cleo Harmony CVE-2024-55956

• Introduced new detection capabilities for JWT anomalies, enhancing security monitoring

• Minor performance optimizations and improvements.

• New virtual patch drive for Kerio Control CVE-2024-52875

• Resolve false positives and enhance protection provided by XSS drives

A new Dashboard feature is ready for launch :

Bugs solved :

• Site status issue : a site could appear to be "Created and waiting for DNS changeover" although the DNS changeover was detected and the SSL certificate was created and deployed.

A new Dashboard feature is ready for launch :

What's new :

• Improve performances

• Improve UI

• Upgrade Injection detection drives

• Refined Command injection detection

Upgrade of cluster capacity

• Improvements in SST injection detection

• New Virtual patchs

New Feature: OTP-based Multi-Factor Authentication (MFA)

We are excited to announce that Multi-Factor Authentication (MFA) is now available using app-based One-Time Passwords (OTP). Users can now enable app-based MFA for enhanced security, in My profile.

• New drives detecting PAN-OS CVE-2024-9474, WP Really Simple Security CVE-2024-10924

• SQLi detections enhancements

• Log Filtering: Added the ability to filter logs by attack type.

• New drive that instantly blocks requests with obvious attack patterns, configurable in expert mode.

• New experimental Slowloris drive.

• SQLi, directory traversal, and Linux & Windows LFI are now more broadly detected.

• New Booster drive : Scripting or empty user-agent. Increases penalty applied only in case of others anomalies detected. Enable by default.

Add a significant amount of web scanner User-Agent in bad bot list

Bugs solved :

• My Account / My Organization: Resolved an issue where all users in the organization were displayed as "inactive".

• Dashboard Deployment: Fixed the monthly report email for users who belong to a single organization with multiple clusters.