Tim Morgan

Author

Timothy D. Morgan, Principal Engineer. Tim brings 25 years of experience as a software developer, penetration tester, digital forensics researcher, and application security expert. His extensive background features a portfolio of research publications on topics such as digital forensics, XML external entity (XXE) attacks, practical cryptanalysis, and application timing attacks. As the inventor of an innovative security analytics product, Tim now leads efforts to deliver holistic visibility and advanced capabilities to the AttackIQ product line.

See other articles by Tim Morgan

Vulnerability Research

Windows Service Permissions and DLL Sideloading

As any seasoned security professional knows, many published security vulnerabilities and attacks are over-hyped. What makes something newsworthy is not always that it poses a significant risk to most organizations. If an attack doesn’t appear to be technically sophisticated, it will often be overlooked.

March 28, 2024 Read More

Vulnerability Research

DeepSurface RiskAnalyzer 3.0 – The Launch of Remediation Workflow

Most of our development time is focused on the application of risk-based vulnerability management: DeepSurface does the math (there’s a lot of math) and shows you which vulnerabilities carry the greatest risk in your environment, and why. People frequently respond to a demo of DeepSurface with, “That’s amazing… but what do I do next?”

October 24, 2022 Read More

Vulnerability Research

Why Moving Beyond CVSS Scores is a Business Imperative

Organizations today find themselves at a critical turning point in the evolution of their vulnerability management efforts. New vulnerabilities are being published more quickly than teams can credibly analyze and remediate them (currently greater than 75 per day), while at the same time a serious talent shortage has developed. According to CyberSeek, the U.S. cybersecurity workforce has over 950,000 workers, with approximately 465,000 open positions.

July 27, 2022 Read More

Vulnerability Research

4 Signs Your Vulnerability Risk Analysis Process is Outdated

With increasing online threats and a massive shift to remote work over the past two years, it’s no surprise that cybersecurity risks are a top concern for businesses in 2022. Cyber incidents top the Allianz Risk Barometer for the “most important global business risk” in 2022, accounting for 44% of the survey’s responses.

July 13, 2022 Read More

Vulnerability Research

Computing Context is Everything

It’s January 14, 2020. Patch Tuesday. Your CIO wants to know: “ How does that RDP vulnerability I saw in the news affect us? ” Well, which RDP vulnerability are you talking about, boss?” Never mind; it’s still a good question. You dig deeper.

May 23, 2022 Read More

Vulnerability Research

Quantifying Risks of Remote Workers

With everyone working from home and IT teams struggling to scale up their infrastructure, how are you accounting for risk?

May 23, 2022 Read More

Vulnerability Research

DeepSurface 2.7

We’re excited to announce the general availability of DeepSurface Risk Analyzer v2.7! There are a ton of changes under the hood, but we wanted to let you know about a few key improvements.

December 15, 2021 Read More

Vulnerability Research

A View of PrintNightmare Through the Lens of Prioritization

Now that the dust has settled around CVE-2021-34527, also known as PrintNightmare, we thought we’d use it as an example of how DeepSurface can reprioritize even the highest priority vulnerabilities, saving you and your patch team hours of effort. For this blog post, you don’t need to know anything about PrintNightmare other than it was nearly ubiquitous, there are dozens of exploits in the wild, and that it’s fairly easy to remediate.

November 29, 2021 Read More

Vulnerability Research

Announcing DeepSurface 2.6

We’re excited to announce the general availability of DeepSurface Risk Analyzer v2.6! There are a ton of changes under the hood, but we wanted to let you know about a few key improvements.

November 16, 2021 Read More

Vulnerability Research

DeepSurface Security Advisory: LPE in Firefox on Windows

Firefox is vulnerable to local privilege escalation (LPE) attacks under certain conditions on Windows platforms. This would allow an attacker to perform a local privilege escalation attack against Firefox users using the same Windows system. Through our responsible disclosure program Mozilla was contacted, and full technical details were provided, but has ultimately chosen not to fix this vulnerability.

September 28, 2021 Read More

Vulnerability Research

DeepSurface Security Advisory: LPE in Adobe Reader on Windows

Older versions of Adobe Acrobat Reader are vulnerable to local privilege escalation (LPE) attacks under certain conditions on Windows platforms. This would allow an attacker to perform a local privilege escalation attack against Acrobat Reader users using the same Windows system. Through our responsible disclosure program Adobe was contacted and provided a fix for this issue. Adobe also issued CVE-2021-35982 to track the vulnerability.

September 16, 2021 Read More

Vulnerability Research

DeepSurface 2.4

We’re excited to announce our latest version of the DeepSurface product – DeepSurface 2.4. The latest version of our vulnerability management platform expands our reporting capabilities to enable exportable reports to XLSX and PDF to make reporting your vulnerable hosts and missing patches even easier, added support for Thycotic Secret Server PAM, easier setup/administration including emailing of generated reports, and enhancements of our windows agent.

August 13, 2021 Read More