Ansible vs Terraform: Which is More Secure for Infrastructure Automation?

Gartner describes infrastructure as code IaC as a key way to unlock the potential of the cloud. However,…...

UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools

Threat hunters have uncovered a new threat actor named UAT-5918 that has been attacking critical infrastructure entities in Taiwan since at least 2023. "UAT-5918, a threat actor believed to be motivated by establishing long-term access for information theft, uses a combination of web shells and...

The vulnerability of the `nvkm_client_new()` function in the `drivers/gpu/drm/nouveau/nvkm/core/client.c` file of the Nouveau driver module allows a hacker to cause a service failure. This vulnerability relates to the Direct Rendering Infrastructure (DRI) support in NVIDIA’s Linux kernel-based graphics drivers.

The vulnerability of the nvkmclientnew function in the drivers/gpu/drm/nouveau/nvkm/core/client.c file of the Nouveau driver, a driver for supporting Direct Rendering Infrastructure DRI in NVIDIA graphics cards and Linux operating systems, is related to improper resource locking. Exploiting this...

The vulnerability of the dcn20_get_dcc_compression_cap() function in the drivers/gpu/drm/amd/display/dc/resource/dcn20/dcn20_resource.c driver module allows a malicious actor to trigger a service failure. This vulnerability exists in the Linux operating system’s AMD GPU Direct Rendering Infrastructure (DRI) support driver.

The vulnerability of the dcn20getdcccompressioncap function in the drivers/gpu/drm/amd/display/dc/resource/dcn20/dcn20resource.c driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the resource_log_pipe_topology_update() function in the drivers/gpu/drm/amd/display/dc/core/dc_resource.c file of the DRI support driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a service failure.

The vulnerability of the resourcelogpipetopologyupdate function in the drivers/gpu/drm/amd/display/dc/core/dcresource.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems, relates to pointer manipulation. Exploiting this vulnerability could allow ...

UAT-5918 targets critical infrastructure entities in Taiwan

By Jung soo An, Asheer Malhotra, Brandon White, and Vitor Ventura. Cisco Talos discovered a malicious campaign we track under the UAT-5918 umbrella that has been active since at least 2023. UAT-5918, a threat actor believed to be motivated by establishing long-term access for information theft,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: nerdctl, helm-push, ctop, zot, kargo, osv-scanner, kubescape, wolfictl, cilium-cli, spegel, eksctl, chartmuseum, kubevela, fuse-overlayfs-snapshotter, newrelic-infrastructure-agent, zarf, docker-compose, envoy-gateway, syft, kaniko, k3s, buildkitd, cert-manager-cmctl...

The vulnerability of the amdgpu_dm_fini() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c driver module allows a hacker to cause a service failure in Linux-based AMD graphics cards that support Direct Rendering Infrastructure (DRI).

The vulnerability of the amdgpudmfini function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-7267

Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to retrieve information about IP infrastructure and credentials. This issue affects EZD RP all versions before 19.6...

The vulnerability of the drm_dp_mst_up_req_work() function in the driver drivers/gpu/drm/display/drm_dp_mst_topology.c, which supports the Direct Rendering Infrastructure (DRI) of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmdpmstupreqwork function in the driver drivers/gpu/drm/display/drmdpmsttopology.c, which is part of the Direct Rendering Infrastructure DRI support for the Linux kernel, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker...

FBI and CISA Urge Enabling 2FA to Counter Medusa Ransomware

FBI and CISA warn of Medusa ransomware attacks impacting critical infrastructure. Learn about Medusa's tactics, prevention tips, and…...

Patch it up: Old vulnerabilities are everyone’s problems

Welcome to this week's edition of the Threat Source newsletter. Let's pick up where we left off in my last newsletter. Please mark your calendars: The free support for Windows 10 will end on October 14, 2025. When a software loses vendor support, it no longer receives patches or updates. As...

USN-7344-2: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

The vulnerability of the Azure Arc software for connecting local infrastructure lies in the lack of data cleansing measures at the management level, allowing attackers to escalate their privileges.

The vulnerability of the Azure Arc software installer for local infrastructure is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges...

Chinese Volt Typhoon Hackers Infiltrated US Electric Utility for Nearly a Year

Dragos reveals Volt Typhoon hackers infiltrated a US electric utility for 300 days, collecting sensitive data. Learn how this cyberattack threatens infrastructure...

Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits

The China-nexus cyber espionage group tracked as UNC3886 has been observed targeting end-of-life MX Series routers from Juniper Networks as part of a campaign designed to deploy custom backdoors, highlighting their ability to focus on internal networking infrastructure. "The backdoors had varying...

⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact

Cyber threats today don't just evolve—they mutate rapidly, testing the resilience of everything from global financial systems to critical infrastructure. As cybersecurity confronts new battlegrounds—ranging from nation-state espionage and ransomware to manipulated AI chatbots—the landscape become...

EncryptHub’s OPSEC Failures Expose Its Malware Operation

Outpost24's KrakenLabs reveals EncryptHub's multi-stage malware campaign, exposing their infrastructure and tactics through critical OPSEC failures. Learn how…...

The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to gain privileged access to infrastructure resources or cause service interruptions.

The vulnerability of the Oracle Solaris operating system’s file system is related to reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to gain privileged access to infrastructure resources or cause service failures...

The vulnerability of the VMware ESXi hypervisor, the VMware Cloud Foundation virtualization platform, the VMware Telco Cloud Platform telecommunications cloud platform, and the VMware Telco Cloud Infrastructure involves writing arbitrary values anywhere and overflowing buffers. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of VMware ESXi hypervisor, the VMware Cloud Foundation virtualization platform, the VMware Telco Cloud Platform telecommunications cloud platform, and the VMware Telco Cloud Infrastructure are related to writing arbitrary values anywhere and overwriting buffers. Exploiting this...