Hackers Claim to Sell 350 GB Law Enforcement Data
Russian cybercriminals are offering sensitive information stolen from the US Marshals Service (USMS) for sale on the dark web. The cybercriminals claim to have 350…
Month: March 2023
Exploiting Improper Validation of Amazon Simple Notification Service SigningCertUrl
Note: This is the “text notes” version of my DEF CON 30 Cloud Village Lightning Talk. The talk was not recorded so this is the…
Cyber attribution: Vigilance or distraction?
Cyber attribution is a process by which security analysts collect evidence, build timelines and attempt to piece together evidence in the wake of a cyberattack…
Unauthenticated Remote Code Execution against CommVault Command Center
When Justin Kennedy and Brandon Perry asked me if I was interested in performing a little audit together, I couldn’t resist. Although time was limited,…
Identity theft of 225,000 customers takes place at Latitude Financial Services
Australian firm Latitude Financial Services is hitting news headlines as a cyber attack on its servers has led to the data breach of 225,000 customers.…
Rushed cloud migrations result in escalating technical debt
While 93% of CIOs expect an increase in IT budgets for 2023, 83% of them are feeling pressured to stretch their budgets even further than…
Adobe ColdFusion Vulnerability Exploited in the Wild
Mar 16, 2023Ravie LakshmananZero-Day / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 15 added a security vulnerability impacting Adobe ColdFusion to…
Knowledge Sharing, Collaboration Vital to Fend off Cyberattacks
Dubai, UAE, 15 March 2023: Top regional and global information security officers discussed creating a ‘community of action’ and chalked out strategies to help digital…
Expanding the Attack Surface: React Native Android Applications
window.location.replace(“https://blog.assetnote.io/bug-bounty/2020/02/01/expanding-attack-surface-react-native/”); You can find this blog post on Assetnote’s blog. Source link
First-known Dero cryptojacking operation seen targeting Kubernetes
The first known cryptojacking operation mining the Dero coin has been found targeting vulnerable Kubernetes container orchestrator infrastructure with exposed APIs. Dero is a privacy…
Navigating the future of digital identity
1,450 global consumers’ experiences with passwordless authentication, hybrid identities, and ownership over personally identifiable information reveal that they want more convenience when it comes to…
Using Burp Suite match and replace settings to escalate your user privileges and find hidden features
On May 14th, Lew Cirne, the CEO of New Relic, announced a new platform called New Relic One. The platform, featuring a fresh new design…