Cross-site Request Forgery (CSRF)

github.com/gravitational/teleport is vulnerable to cross-site request forgery CSRF. The library does not have any CSRF protection on its API endpoints, allowing a malicious user to hijack the authentication of other users and submit arbitrary requests...

Carbanak Using Google Services for Command and Control

Carbanak certainly has not sat idly by after years of advanced criminal campaigns targeting primarily financial institutions. The outfit, alleged to have stolen from more than 100 banks worldwide, has popped up again with a new means of managing command and control over its malware and implants...