Maritime Cyberattacks Through the IT–OT–IoT Lens
Three real port cyberattacks show how stolen data, compromised software and ransomware disrupt operations—and what IT, OT and IoT teams can do.
Read More
Blog Entries
From Log Analysis to Proactive OSINT: How SANS SEC450 and SATAYO Transform SOC Defense
In cybersecurity, there is a reality that every Delivery Manager faces daily: Defenders must succeed every single day, while attackers only need to succeed once. I recently had the opportunity to attend the SANS SEC450: SOC Analyst Training – Applied Skills for Cyber Defense Operations course. It was an intense, high-value journey focused on optimizing…
Read MoreBug Fixes for NetEye 4.50
Asset Management: GLPI agent inventory submissions through satellites now work with the glpiinventory plugin On NetEye satellites, nginx proxies GLPI inventory submissions from agents to the GLPI instance running on the master. Until now, the proxy covered only one endpoint, /glpi/front/inventory.php. However, agents that rely on the glpiinventory plugin may also exchange data with the…
Read MoreBug Fixes for NetEye 4.50
NagVis: honor recognize_services and exclude_members for Icinga DB hostgroups When NagVis renders a hostgroup summary object, two map options control which member states may influence the icon: The Icinga DB backend silently ignored both options, so service states were always merged into the hostgroup summary, and exclusion rules were never applied. As a result, a…
Read MoreNetEye 4 – Security Advisory (PHP)
Important: PHP security update Type/Severity NetEye Product Security has rated this update as having a CRITICAL security impact. Topic Updates for the php and glpi packages are now available for NetEye 4. Security Fix for All NetEye Releases Security Fix for NetEye 4.50 Security Fix for NetEye 4.49 CVEs 1. CVE-2026-109618 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H2. CVE-2026-109619 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H3. CVE-2026-91765 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H4. CVE-2025-14181 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H5. CVE-2026-91767 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H6. CVE-2026-91768 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N7. CVE-2026-91766 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N8. CVE-2026-92842 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N9. CVE-2026-93682 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N10. CVE-2026-6103 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N11. CVE-2026-91769 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N12. CVE-2025-1218 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L The two most severe CVEs can be triggered by an unauthenticated remote attacker who sends crafted HTTP requests to a PHP…
Read MoreNetEye 4 – Security Advisory (Grafana)
Important: Grafana security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the grafana packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs Two of the three CVEs are reachable by any low-privileged authenticated user: an oversized request to the Prometheus rule…
Read MoreBug Fixes for NetEye 4.50, 4.49
RKE2: Fix of the upgrade to NetEye 4.49 and NetEye 4.50 fresh installations During an upgrade to NetEye 4.49 or a fresh installation of NetEye 4.50, the configuration of the RKE2 service could cause PCS to report all *_virt_ip resources as failed, potentially resulting in brief service interruptions. This behavior was triggered by a routine…
Read MoreBug Fixes for NetEye 4.50
Graph titles no longer disappear We fixed an issue where graph titles on ICW2 dashboards disappeared a few seconds after the page loaded.Graph titles now remain visible as expected. List of updated packages To solve the issue mentioned above, the following packages have been updated: Reduced unnecessary Keycloak login events We fixed an issue that…
Read MoreNetEye 4 – Security Advisory (Keycloak)
Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: CVEs Most of the 19 CVEs are Missing/Incorrect Authorization flaws in the Admin REST API and Fine-Grained Admin Permissions (FGAP) v2:…
Read MoreNetEye Conference DACH: 4 Key Takeaways on IT and Cybersecurity
What happens when Monitoring, Observability and Cybersecurity are no longer treated as separate disciplines? How can organizations gain a better understanding of complex IT environments? How can they identify relevant threats at an early stage? And how can they turn growing volumes of data and alerts into informed decisions? These were some of the key…
Read MoreNetEye 4 – Security Advisory (GLPI)
Important: GLPI security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 Summary The list of vulnerabilities, regarding to the bundled plugins, patched in this update is: For details on how to apply this…
Read MoreBug Fixes for NetEye 4.50
GLPI: Fix of the upgrade to NetEye 4.50 when custom GLPI plugins are installed During the upgrade to NetEye 4.50, NetEye moves the GLPI plugins that you installed manually out of the folder /usr/share/glpi/plugins. Before this fix, NetEye did not correctly identify which plugins were installed manually. On NetEye clusters with manually installed plugins, the…
Read MoreVelociraptor: Endpoint Visibility and Incident Response
When a cyber incident occurs, one of the first challenges is understanding what happened, which systems were involved, and what traces were left behind. In this context, Velociraptor can help: It’s an open-source DFIR tool that can collect and examine endpoint data in a centralized, targeted, and repeatable way. After completing a course focused on…
Read MoreThe Next Blackout Might Not Start on Earth
A field briefing on space threat intelligence, for security teams that run zero satellites but depend on dozens of them I don’t work in the space industry. I don’t design satellites, operate ground stations, or even analyze orbital telemetry in real time. Worth saying upfront, because it’s the right starting point for this kind of…
Read MoreBug Fixes for NetEye 4.50
Tornado: Allow disabling forwarding of local system logs to Tornado By default, rsyslog on NetEye nodes forwards all logs it handles to the Tornado event engine. These include the system logs of the NetEye node itself, which can generate a large number of syslog events on Tornado. Until now, there was no way to turn…
Read More