Fire Eye Exploitation: Project Zero’s Vulnerability of the Beast
Summary: Google Project Zero disclosed a vulnerability, dubbed 666, in FireEye's NX, FX, AX and EX series appliances that could be triggered through the passive monitoring interface by sending a JAR file across the network, which FireEye's JODE decompiler would then execute. FireEye pushed temporary mitigations within hours and fully resolved the issue within 2 days, with devices on security content release 427.334 and higher unaffected.
Key Takeaway: A network tap sits at the egress point with access to employee email, passwords, downloads and confidential attachments, so an attacker only needed to send an email to a user - the recipient did not have to open it - to reach one of the most privileged machines on the network.
Read the original at Google Project Zero ↗
- Topics
- Governance, Risk & Compliance
- Related
- Upcoming Speaking Engagements Cyber Risks · Nov 14, 2026Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters Cyber Risks · Nov 13, 2026AI Doesn’t Have to Go Rogue to Break the World Cyber Risks · Nov 13, 2026