“Nudify” deepfakes stored unprotected online
Yesterday, we told you about how millions of pictures from specialized dating apps had been stored online without any kind of password protection. Now it’s…
Month: April 2025
Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse
Apr 02, 2025Ravie LakshmananCloud Security / Vulnerability Cybersecurity researchers have disclosed details of a now-patched privilege escalation vulnerability in Google Cloud Platform (GCP) Cloud Run…
Cool Unix Quote | Daniel Miessler
I find the simplicity and interconnectibility(sp) of UNIX to be one of the most pleasing and functional things in the world. The concept of linking…
FTC chief flags data privacy concerns in 23andMe bankruptcy
Federal Trade Commission Chairman Andrew Ferguson on Monday said genetic testing company 23andMe, which recently initiated a bankruptcy proceeding, must honor its data privacy and security…
Independent tests show why orgs should use third-party cloud security services
Businesses don’t always get what they pay for in cybersecurity. Some of the most expensive cloud network firewall vendors are among the worst performers against…
Counterfeit Android devices found preloaded With Triada malware
A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon…
Firefox 137 Launches with Patches for High-Severity Security Flaws
Mozilla has officially launched Firefox 137 with crucial security fixes aimed at addressing several high-severity vulnerabilities reported by security researchers. As part of its April…
How to map and manage your cyber attack surface with EASM
In today’s digital landscape, understanding your organization’s attack surface is crucial for maintaining robust cybersecurity. To effectively manage and mitigate the cyber-risks hiding in modern…
Of Sigs and Ego
I’ve recently been toiling with the issue of listing credentials in my email signature. Since I’ve had anything to put back there I’ve always added…
Google Cloud Platform Vulnerability Exposes Sensitive Data to Attackers
A privilege escalation vulnerability in Google Cloud Platform (GCP), dubbed “ImageRunner,” was recently discovered and fixed. The flaw, which Tenable Research brought to light, potentially…
Utimaco releases Quantum Protect solution
Utimaco launched Quantum Protect, the Post Quantum Cryptography application package for its u.trust General Purpose HSM (Hardware Security Modules) Se-Series. The advent of quantum computers…
Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
Apr 02, 2025Ravie LakshmananCryptojacking / Malware Cybersecurity researchers have shed light on an “auto-propagating” cryptocurrency mining botnet called Outlaw (aka Dota) that’s known for targeting…