760 matches found
The Japanese Automotive Industry Attack Landscape
Recently, we released a major report analyzing the threat landscape of Japan, the globe’s third largest economy. In that report we looked at the ways in which threat actors infiltrate Japanese companies spoiler alert: it is often through foreign subsidiaries and affiliates and some of the most...
Surviving the 800 Gbps Storm: Gain Insights from Gcore's 2023 DDoS Attack Statistics
Gcore Radar is a quarterly report prepared by Gcore that provides insights into the current state of the DDoS protection market and cybersecurity trends. This report offers you an understanding of the evolving threat landscape and highlights the measures required to protect against attacks...
RedEnergy Stealer-as-a-Ransomware Threat Targeting Energy and Telecom Sectors
A sophisticated stealer-as-a-ransomware threat dubbed RedEnergy has been spotted in the wild targeting energy utilities, oil, gas, telecom, and machinery sectors in Brazil and the Philippines through their LinkedIn pages. The .NET malware "possesses the ability to steal information from various...
Activities in the Cybercrime Underground Require a New Approach to Cybersecurity
As Threat Actors Continuously Adapt their TTPs in Today's Threat Landscape, So Must You Earlier this year, threat researchers at Cybersixgill released the annual report, The State of the Cybercrime Underground. The research stems from an analysis of Cybersixgill's collected intelligence items...
Cadet Blizzard emerges as a novel and distinct Russian threat actor
As Russia’s invasion of Ukraine continues into its second year and Microsoft continues to collaborate with global partners in response, the exposure of destructive cyber capabilities and information operations provide greater clarity into the tools and techniques used by Russian state-sponsored...
Building a seamless and secure cloud environment with AWS
Elevate cloud capabilities and stay ahead in today's dynamic cloud landscape...
Winning the Mind Game: The Role of the Ransomware Negotiator
Get exclusive insights from a real ransomware negotiator who shares authentic stories from network hostage situations and how he managed them. The Ransomware Industry Ransomware is an industry. As such, it has its own business logic: organizations pay money, in crypto-currency, in order to regain...
CVE-2023-32551
Landscape allowed URLs which caused open redirection...
CVE-2023-32549
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator...
CVE-2023-32550
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API...
CVE-2023-32549
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator...
CVE-2023-32551
Landscape allowed URLs which caused open redirection...
CVE-2023-32550
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API...
CVE-2023-32551 Landscape Open Redirect
Landscape allowed URLs which caused open redirection...
CVE-2023-32551 Landscape Open Redirect
Landscape allowed URLs which caused open redirection...
CVE-2023-32551
CVE-2023-32551 concerns Canonical Landscape’s web-facing URL handling, where allowed URLs can cause an open redirect. The connected documents consistently describe an open-redirect vulnerability stemming from how Landscape processes URLs, enabling redirection to potentially malicious sites. The e...
CVE-2023-32550 Landscape's Apache server-status is accessible by default
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API...
CVE-2023-32550
The CVE-2023-32550 issue affects Landscape: Landscape’s server-status page exposes sensitive system information via GET requests, enabling leakage that could assist further attacks on the Landscape API. According to the sources, this data exposure is the primary vulnerability, with CVSS scores in...
CVE-2023-32550 Landscape's Apache server-status is accessible by default
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API...