159 matches found
IPSpinner
🔁 IPSpinner IPSpinner는 들어오는 모든 요청을 사용자가 선택한 다양한 공급자를 통해 리디렉션할 수 있는 로컬 프록시입니다. 목적은 각 요청의 소스 IP 주소를 회전시키는 패스스루pass-through 프록시를 만드는 것입니다. 예를 들어, IPSpinner를 통해 무차별 대입bruteforce 공격을 실행하면 서버가 수백 개의 서로 다른 IP 주소에서 요청을 받게 되므로 탐지를 피하는 데 도움이 됩니다. IPSpinner는 현재 AWSAPI Gateway, AzureCloud Shell 및 GitHubGitHu...
azure-vulnerability-remediation-project
취약점 연구 및 조치: Azure 클라우드 인프라 프로젝트 개요 이 프로젝트는 클라우드 호스팅 Windows Server 2025 인스턴스CyberVM에 대한 종단 간 취약점 관리 수명 주기를 기록합니다. 이 랩은 직접적인 소프트웨어 패치와 아키텍처 보완 제어를 모두 사용하여 심각도가 높은 보안 위험을 식별, 분석 및 차단하는 사전 예방적 접근 방식을 보여줍니다. 1. 식별 및 기준 평가 초기 자격 증명 스캔은 Nessus Essentials 를 사용하여 보안 기준을 설정하기 위해 수행되었습니다. 스캔 결과 총 66개의 취약점...
Azure SQL Managed Instance Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
Malicious code in @cacheable/node-cache (npm)
npm/@cacheable/node-cache version 3.1.2 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases...
CVE-2026-53228 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-WFX4-V2WF-4GMP vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53216 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-JPVF-6235-4RH8 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-PW9R-H2M6-6VVG vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu-melange, linux-qemu, linux-azure...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
The vulnerability of Azure cloud services for managing geospatial data by Microsoft Planetary Computer Pro, related to deserialization mechanism flaws, allows attackers to disclose protected information.
The vulnerability of Azure cloud services for managing geospatial data with the Microsoft Planetary Computer Pro is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
How Storm-2949 turned a compromised identity into a cloud-wide breach
In this article 1. Attack chain overview 1. Cloud compromise: Microsoft Entra ID and Microsoft 365 2. Initial access and persistence through targeted social engineering and SSPR abuse 3. Directory discovery and persistence 4. Microsoft 365 discovery and exfiltration 5. Cloud compromise: Microsoft...
GHSA-H53C-6597-VMFW vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu, linux-azure...
GHSA-R5QW-5M8Q-6774 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu, linux-azure...
CVE-2026-43109 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu, linux-azure...
The vulnerability of the interactive browser-based environment Azure Cloud Shell, related to the lack of data cleansing at the management level, allows attackers to perform spoofing attacks.
The vulnerability of the Azure Cloud Shell, a browser-based interactive environment, is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...
CVE-2026-33117
The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...
Defending consumer web properties against modern DDoS attacks
If you own, create, or maintain online services and web portals, you’re probably aware of the dramatic upswing in DDoS attacks on your domains. AI has democratized tooling not just for us but for threat actors as well. DDoS in this era has extended from simple bandwidth saturation to sophisticate...
