AZL-56440 CVE-2025-24860 affecting package cassandra 4.0.10-1

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update their own permissions via data control...

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers arises from the lack of authentication mechanisms. This vulnerability allows attackers to influence the integrity of the protected information.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to influence the integrity...

Cyber Threats Targeting the US Government During the Democratic National Convention

Cyber Threats Targeting the US Government During the Democratic National Convention By Anne An · October 2, 2024 Introduction Trellix global sensors detected increased threat activities during the days that the Democratic National Convention DNC was held in August 2024, culminating into a massive...

The vulnerability of software for asset management and GLPI data processing centers, related to improper access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of software for asset management and GLPI data processing centers relates to the implementation of a CSV file, by creating a file with a fake header. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and...

CloudBridge 4000 and 5000 to Optimize NetApp SnapMirror Traffic1

This article describes how you can configure Citrix CloudBridge 4000 and 5000 to optimize NetApp SnapMirror traffic between two Data centers. The article also provides the benchmarking results from lab testing efforts to quantify the gains that can be attained by deploying NetApp SnapMirror...

Explore AI-Driven Cybersecurity with Trend Micro, Using NVIDIA NIM

Discover Trend Micro's integration of NVIDIA NIM to deliver an AI-driven cybersecurity solution for next-generation data centers. Engage with experts, explore demos, and learn strategies for securing AI data centers and optimizing cloud performance...

The vulnerability of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud computing data centers, stems from inadequate access control mechanisms. This allows attackers to elevate their privileges to the root level.

The vulnerability of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud computing data centers, is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to elevate their privileges to the root level...

BIT-CONSUL-2020-12797

HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

Important: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.3.3 security updates and bug fixes

Multicluster Engine for Kubernetes 2.3.3 General Availability release images, which contain security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

Exagate SYSGuard Authorization Issues Vulnerability

Exagate SYSGuard is Exagate's solution for data centers, computer or server rooms, or any other premises equipped with IT equipment. A security vulnerability exists in Exagate SYSGuard 3001 versions prior to 3.2.20.0 that stems from the presence of an authentication bypass vulnerability...

Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk

Multiple security vulnerabilities impacting CyberPower's PowerPanel Enterprise Data Center Infrastructure Management DCIM platform and Dataprobe's iBoot Power Distribution Unit PDU could be potentially exploited to gain unauthenticated access to these systems and inflict catastrophic damage in...

F5 BIG-IP and BIG-IQ Centralized Management Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IQ Centralized Management is a software-based cloud management solution from F5 USA. The solution supports the deployment of application delivery...

The vulnerability of the OpenAPI interface of the Cisco Secure Workload protection tool for multi-cloud data centers (previously known as Tetration) allows a malicious actor to escalate their privileges.

The vulnerability of the OpenAPI interface of the Cisco Secure Workload protection tool for multi-cloud data centers relates to shortcomings in role-based access control when performing operations. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Critical: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.0.9 security fixes and container updates

Multicluster Engine for Kubernetes 2.0.9 General Availability release images, which fix security issues and update container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

The vulnerability in the web interface for managing analytics and automation services in Cisco Nexus Dashboard’s cloud-based data centers allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing analytics and automation of cloud-based Cisco Nexus Dashboard data centers is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

Critical: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.2.3 security updates and bug fixes

Multicluster Engine for Kubernetes 2.2.3 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

The vulnerability of the Coredns platform’s analytics and automation services for managing Cisco Nexus data centers allows a hacker to trigger a service failure.

The vulnerability of the coredns platform for analytics and automation of cloud-based Cisco Nexus Dashboard services exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending continuous DNS requests...

Akamai’s Differentiated Cloud Strategy

Akamai is taking a different approach to cloud computing than providers who base their platforms solely on core data centers. Read more about our strategy...

Addressing cybersecurity at the board level with Difenda and Microsoft

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Cybersecurity is no longer simply a lone silo or regulatory process; it is a business issue that affects every aspect of an organization. From financial losses to reputational damage...

New BMC Supply Chain Vulnerabilities Affect Servers from Dozens of Manufacturers

Three different security flaws have been disclosed in American Megatrends AMI MegaRAC Baseboard Management Controller BMC software that could lead to remote code execution on vulnerable servers. "The impact of exploiting these vulnerabilities include remote control of compromised servers, remote...