2020-025-Cognizant breach, maze ransomware, PAN-OS CVE 2020-2021, SAML authentication walkthrough

<p><span style="font-weight: 400;">Thank you to Marcus Carey for his excellent guidance and leadership this week.</span></p> <p> </p> <p><span style="font-weight: 400;">Cognizant breach:</span> <a href="https://www.ehackingnews.com/2020/06/cognizant-reveals-employees-data.html"> <span style= "font-weight: 400;">https://www.ehackingnews.com/2020/06/cognizant-reveals-employees-data.html</span></a></p> <p><span style="font-weight: 400;">Maze ransomware write-up:</span> <a href= "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/ransomware-maze/"> <span style= "font-weight: 400;">https://www.mcafee.com/blogs/other-blogs/mcafee-labs/ransomware-maze/</span></a></p> <p><a href= "https://www.fireeye.com/blog/threat-research/2020/05/tactics-techniques-procedures-associated-with-maze-ransomware-incidents.html"> <span style= "font-weight: 400;">https://www.fireeye.com/blog/threat-research/2020/05/tactics-techniques-procedures-associated-with-maze-ransomware-incidents.html</span></a></p> <p> </p> <p><a href= "https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/authentication/authentication-types/saml"> <span style= "font-weight: 400;">https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/authentication/authentication-types/saml</span></a></p> <p><span style="font-weight: 400;">PAN-OS CVE 2020-2021 - </span></p> <p><span style="font-weight: 400;">We have been made aware of a serious issue with SAML on Palo Alto Networks PAN-OS</span></p> <p><span style="font-weight: 400;">We strongly encourage our customers to upgrade to one of the following versions :</span></p> <p><span style="font-weight: 400;">PAN-OS 8.1.15</span></p> <p><span style="font-weight: 400;">PAN-OS 9.0.9</span></p> <p><span style="font-weight: 400;">PAN-OS 9.1.3 and greater</span></p> <p><span style="font-weight: 400;">This is a critical vulnerability with the only mitigation being to either turn OFF SAML or to upgrade the PAN-OS.</span></p> <p><span style="font-weight: 400;">A CVE will be released on Monday ::  CVE-2020-2021</span></p> <p> </p> <p