179 matches found
IPSpinner
🔁 IPSpinner IPSpinner is a local proxy which can be used to redirect all incoming requests through different chosen providers. The purpose is to create a pass-through proxy that rotates the source IP address of each request. As an example, running a bruteforce operation through IPSpinner will hel...
azure-vulnerability-remediation-project
Vulnerability Research & Remediation: Azure Cloud Infrastructure Project Overview This project documents the end-to-end vulnerability management lifecycle for a cloud-hosted Windows Server 2025 instance CyberVM. The lab demonstrates a proactive approach to identifying, analyzing, and neutralizing...
The vulnerability of Azure cloud services for managing geospatial data with the Microsoft Planetary Computer Pro lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.
The vulnerability of Azure cloud services for managing geospatial data with the Microsoft Planetary Computer Pro is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
Azure SQL Managed Instance Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
Malicious code in @cacheable/node-cache (npm)
npm/@cacheable/node-cache version 3.1.2 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...
GHSA-JPVF-6235-4RH8 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...
GHSA-WFX4-V2WF-4GMP vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...
CVE-2026-53216 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...
CVE-2026-53228 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...
GHSA-PW9R-H2M6-6VVG vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...
Beyond the benchmark: Advancing security at AI speed
In this article 1. From the lab into the pipeline 2. This month’s set of discoveries 3. Beyond the headline: What the engineering work taught us 4. Where we go next 5. Defense at AI speed 6. Learn more Every vulnerability has two clocks running. One belongs to the defender racing to find it; the...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...
The vulnerability of Azure cloud services for managing geospatial data by Microsoft Planetary Computer Pro, related to deserialization mechanism flaws, allows attackers to disclose protected information.
The vulnerability of Azure cloud services for managing geospatial data with the Microsoft Planetary Computer Pro is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
How Storm-2949 turned a compromised identity into a cloud-wide breach
In this article 1. Attack chain overview 1. Cloud compromise: Microsoft Entra ID and Microsoft 365 2. Initial access and persistence through targeted social engineering and SSPR abuse 3. Directory discovery and persistence 4. Microsoft 365 discovery and exfiltration 5. Cloud compromise: Microsoft...
GHSA-R5QW-5M8Q-6774 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-vmware, linux-aws...