CyberProof Acquires Interpres Security
A Gartner distinguished vendor in Continuous Threat Exposure Management (CTEM) and Automated Security Control Assessments (ASCA).
Better Security, Together
Our worldwide security operations teams work closely with your enterprise security organization, collaborating to deliver better security together, to protect you today against tomorrow’s threats.
Cloud First Security
CyberProof is a cloud first security operations company, enabled through key cloud partners, to help deliver the most cutting edge security services to help protect your enterprise.
SecOps & Risk mitigation
CyberProof uses OSINT and threat intelligence feeds for visibility into threats.
CyberProof’s adaptable playbooks address continuously evolving threats with updated strategies.
Professionals manage sophisticated networks, leveraging experience to counter advanced threats.
Professionals manage sophisticated networks, leveraging experience to counter advanced threats.
24/7 global SOC support ensures incident response with guaranteed SLA.
24/7 global SOC support ensures incident response with guaranteed SLA.
CyberProof develops recovery plans, restoring capabilities after a cyber incident.
Classify and manage enterprise assets, understanding risks and data sensitivity.
Non-destructive tests uncover potential exploits in assets and applications.
Mitigate security issues early with CyberProof’s training and awareness programs.
Rigorous security assessment for on-premise and cloud applications to ensure protection.
IAM manages user access, monitors for anomalies, ensuring security.
Cloud First approach ensures compliance and security within cloud environments.
Managed service for SIEM, EDR, MXDR, and threat intelligence solutions.
Identify, assess, and mitigate security vulnerabilities through regular scanning.
Partners
“Today I have complete visibility into the entire environment, in real time”
Jamil Farshchi | Equifax CISO
CyberProof Acquires Interpres Security
By leveraging and integrating the Interpres Security CTEM solution into its security services portfolio, CyberProof is able to continuously identify, assess, and prioritize risk while adapting defense services, like MDR, Vulnerability management and Use case management to address ever evolving threats. Take proactive steps to fortify your security today!
Start the journey today
Case Studies
Retail Company Reduces Data Costs by 85% with SIEM Transformation
90% increase in visibility after deploying Microsoft XDR with CyberProof
Enterprise saves millions on data ingestion & storage following cloud migration.
SOC unification streamlines enterprise insurance company’s security & network monitoring operations.
Global medical devices company gains visibility and meets stringent compliance standards across global geos
Pharmaceutical organization significantly enhances threat detection and response times
Threat Alerts
Apache Tomcat Vulnerability Under Active Exploitation
CVE-2025-24813, a critical vulnerability in Apache Tomcat, is now being actively exploited in the wild, following the release of a public proof-of-concept (PoC) just 30 hours after disclosure. The flaw affects Apache Tomcat versions 11.0.0-M1 to 11.0.2, 10.1.0-M1 to 10.1.34, and 9.0.0-M1 to 9.0.98, potentially leading to remote code execution (RCE) or unauthorized access to sensitive files under certain conditions. Exploitation is possible when Tomcat’s file-based session persistence is enabled with default configurations or when PUT requests are allowed for injecting arbitrary content.
The attack method consists of two main stages. First, the attacker uploads a serialized Java session file containing a Base64-encoded payload to the session storage directory via a PUT request. Then, they trigger deserialization by sending a GET request with a JSESSIONID pointing to the malicious session file. This flaw is particularly dangerous as it requires no authentication and can be exploited with minimal effort when file-based session storage is in use. Attackers will likely refine their techniques to extend the attack beyond session storage, potentially deploying malicious JSP files, altering configurations, or even installing persistent backdoors.
Veeam Backup Vulnerability Enables Remote Code Execution
A newly discovered vulnerability in Veeam Backup & Replication, tracked as CVE-2025-23120 (CVSS Score 9.9), has emerged as a critical threat for enterprise environments. This flaw enables authenticated domain users to execute arbitrary code remotely, exposing a direct path to compromising backup infrastructures. CVE-2025-23120 vulnerability stems from a deserialization flaw in the Veeam Backup & Replication software’s .NET-based components. These components mishandle serialized data, allowing malicious actors to craft input that executes arbitrary code on the server.
The flaw only affects installations joined to a Windows domain – a configuration many organizations adopt despite Veeam’s longstanding guidance to avoid it. In such cases, any domain user can exploit the vulnerability, regardless of their privilege level.
Awards
Start the journey today