Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses

In this blog entry, Trend™ Research explores how ransomware actors are shifting their focus to cloud-based assets, including the tactics used to compromise business-critical data in AWS environments...

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align (formerly AgileCraft) stems from deficiencies in the authorization process, allowing unauthorized users to gain access to protected information.

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when performing the Team Overview action. Exploiting this vulnerability could allow a malicious...

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align (formerly AgileCraft) stems from deficiencies in the authorization process, allowing unauthorized users to gain access to protected information.

The vulnerability of the cloud-based corporate solution for planning and managing Jira Align formerly AgileCraft is related to deficiencies in the authorization process when performing Edit Checklist items. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align (formerly AgileCraft) stems from deficiencies in the authorization process, allowing unauthorized users to gain access to protected information.

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when performing the “Add Checklist” action. Exploiting this vulnerability could allow a malicious...

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align (formerly AgileCraft) stems from deficiencies in the authorization process, allowing unauthorized users to gain access to protected information.

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when handling private lists. Exploiting this vulnerability could allow a malicious actor, operatin...

Meta boosts scam protection on WhatsApp and Messenger

Vulnerable Facebook Messenger and WhatsApp users are getting more protection thanks to a move from the applications' owner, Meta. The company has announced more safeguards to protect users especially the elderly from scammers. The social media, publishing, and VR giant has added a new warning on...

Microsoft Entra ID 访问控制错误漏洞

Microsoft Entra ID is a cloud-based identity and management solution from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Entra ID that stems from an elevation of privilege vulnerability...

EUVD-2017-13006

Malware in sbrugna...

EUVD-2025-0105

Malicious code in bioql PyPI...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A code issue vulnerability exists in QNAP Qsync Central versions prior to 5.0.0.1, which stems from a null pointer dereference and could lead to a denial of service attack...

QNAP Qsync Central 安全漏洞

QNAP Qsync Central is the official private cloud synchronization service developed by QNAP for its Network Attached Storage NAS devices. QNAP Qsync Central suffers from an uncontrolled resource consumption vulnerability that can be exploited by attackers to cause a denial of service...

Paraşüt 跨站脚本漏洞

Paraşüt is a cloud-based online finance and accounting management software from Paraşüt Turkey. A cross-site scripting vulnerability exists in Paraşüt versions 0.0.0.65efa44e through 20250204, which stems from improper input neutralization and could lead to cross-site scripting attacks...

The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) relates to authentication procedures that allow attackers to escalate their privileges.

The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to authentication procedures’ deficiencies. Exploiting this vulnerability could allow attackers to increase their privileges remotely...

agora 代码问题漏洞

agora is a cloud-based learning and research platform open-sourced by the Agora Foundation. A code issue vulnerability exists in versions prior to agora fall23-Alpha1 690ce56, which stems from a user controller allowing non-standard image formats leading to cross-site scripting attacks...

Turtek Eyotek 安全漏洞

Turtek Eyotek is a cloud-based educational institution management system from Turtek Turkey. A security vulnerability exists in Turtek Eyotek versions prior to 23.06.2025, which stems from bypassing authorization via a user control key and could lead to the exploitation of trusted identifiers...

QNAP Qsync Central SQL Injection Vulnerability

QNAP Qsync Central is a cloud-based file synchronization service on NAS from Taiwan, China-based QNAP. QNAP Qsync Central suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker could exploit the vulnerabili...

QNAP Qsync Central SQL注入漏洞

QNAP Qsync Central is a cloud-based file synchronization service on NAS from Taiwan, China-based QNAP. QNAP Qsync Central suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker could exploit the vulnerabili...

HCL Domino Volt和HCL Domino Leap 安全漏洞

HCL Domino Volt and HCL Domino Leap are both products of HCL India.HCL Domino Volt is a low-code application development solution based on the Domino platform.HCL Domino Leap is a cloud-based collaboration platform that modernizes traditional Domino applications. HCL Domino Volt and HCL Domino Le...

HCL Domino Volt和HCL Domino Leap 安全漏洞

HCL Domino Volt and HCL Domino Leap are both products of HCL India.HCL Domino Volt is a low-code application development solution based on the Domino platform.HCL Domino Leap is a cloud-based collaboration platform that modernizes traditional Domino applications. A security vulnerability exists i...

SAP ERP BW Business Content Code Injection Vulnerability

SAP ERP BW Business Content is a cloud-based e-commerce platform that helps companies create a personalized and seamless buying experience for their customers. SAP ERP BW Business Content suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary code...