GitLab Security Update, Patch for Critical Vulnerabilities
GitLab announced the release of critical security patches for its Community Edition (CE) and Enterprise Edition (EE). The newly released versions 17.6.2, 17.5.4, and 17.4.6…
Author: Cybernoz
Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor
Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor Pierluigi Paganini December 12, 2024 Russia-linked APT group Secret Blizzard is using Amadey Malware-as-a-Service to infect systems in…
ChatGPT Down Globally, Services Restored After Hours Of Outage
In a significant disruption, OpenAI’s popular AI chatbot, ChatGPT, experienced a global outage on Thursday morning, leaving millions of users unable to access its services…
BadRAM Attack Breaches AMD Secure VMs with $10 Device
Researchers have uncovered a vulnerability that allows attackers to compromise AMD’s Secure Encrypted Virtualization (SEV) technology using a $10 device. This breakthrough exposes a previously…
Post Office scandal in 2024 – part 2: Capture, the prequel
Years before the controversial Horizon system was introduced in 1999, subpostmasters who used a Post Office system known as Capture suffered unexplained branch account shortfalls…
Apache Struts RCE Vulnerability Exposes Servers to Malicious File Uploads
A critical security vulnerability has been discovered in Apache Struts 2, a popular open-source web application framework, potentially exposing numerous organizations to severe cyber threats.…
Splunk RCE Vulnerability Let Attackers Execute Remote Code
Splunk, the data analysis and monitoring platform, is grappling with a Remote Code Execution (RCE) vulnerability. This flaw, identified as CVE-2024-53247, affects several versions of…
Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested
Dec 12, 2024Ravie LakshmananCyber Crime / DDoS Attack A global law enforcement operation has failed 27 stresser services that were used to conduct distributed denial-of-service…
Europol Shutsdown 27 DDoS Service Provider Platforms
In a major international operation codenamed “PowerOFF,” Europol, collaborating with law enforcement agencies across 15 countries, has taken down 27 illegal platforms facilitating Distributed Denial-of-Service…
Shaping effective AI governance is about balancing innovation with humanity
In this Help Net Security interview, Ben de Bont, CISO at ServiceNow, discusses AI governance, focusing on how to foster innovation while ensuring responsible oversight.…
New BadRAM Attack Exploits AMD SEV Protections, Threatens Cloud Security
Researchers have uncovered a critical vulnerability in AMD’s Secure Encrypted Virtualization (SEV) technology that could compromise sensitive data in cloud environments. Dubbed “BadRAM,” this attack…
Keycloak: Open-source identity and access management
Keycloak is an open-source project for identity and access management (IAM). It provides user federation, strong authentication, user management, authorization, and more. Keycloak is based…