228 matches found
EUVD-2020-4184
Malware in sbrugna...
EUVD-2022-50273
Malicious code in bioql PyPI...
Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover
A severe security flaw has been disclosed in the Red Hat OpenShift AI service that could allow attackers to escalate privileges and take control of the complete infrastructure under certain conditions. OpenShift AI is a platform for managing the lifecycle of predictive and generative artificial...
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
The financially motivated threat actor known as Storm-0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting cloud environments. "Unlike traditional on-premises ransomware, where the threat actor typically deploys malware to encrypt critical files...
Storm-0501’s evolving techniques lead to cloud-based ransomware
Microsoft Threat Intelligence has observed financially motivated threat actor Storm-0501 continuously evolving their campaigns to achieve sharpened focus on cloud-based tactics, techniques, and procedures TTPs. While the threat actor has been known for targeting hybrid cloud environments, their...
Storm-0501’s evolving techniques lead to cloud-based ransomware
Microsoft Threat Intelligence has observed financially motivated threat actor Storm-0501 continuously evolving their campaigns to achieve sharpened focus on cloud-based tactics, techniques, and procedures TTPs. While the threat actor has been known for targeting hybrid cloud environments, their...
Microsoft Azure Stack 安全漏洞
Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A security vulnerability exists in Microsoft Azure Stack. An attacker exploiting the vulnerability could gain...
Compliance Without Coverage is a Risk: How to Close the Gaps with Qualys Policy Audit
Modern compliance and security programs often fail due to technology blind spots rather than weak policies or procedures. Today's IT environments, spanning hybrid, cloud-native, containerized, and legacy platforms, introduce complexities that traditional compliance tools can't fully address. When...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite, related to errors in request processing, allows a hacker to disclose sensitive information.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite arises from incorrect restrictions on path names to the catalog. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protect...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite lies in the lack of protective measures for website structures. This allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite stems from deficiencies in authentication mechanisms, allowing unauthorized access to protected information.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite lies in the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The Impact of the Russia-Ukraine Conflict on the Cloud Computing Risk Landscape
The Russian invasion of Ukraine has fundamentally altered the information technology IT risk landscape, particularly in cloud computing environments. This paper examines how this geopolitical conflict has accelerated data sovereignty concerns, transformed cybersecurity paradigms, and reshaped clo...
VMware Cloud Foundation Information Disclosure Vulnerability
VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware. The platform includes features such as operations automation, infrastructure auto-configuration and integrated lifecycle management. An information disclosure vulnerability exists in VMware Cloud Foundation, which can be...
VMware Cloud Foundation License Issue Vulnerability
VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware. The platform includes features such as operations automation, infrastructure auto-configuration and integrated lifecycle management. VMware Cloud Foundation suffers from an authorization issue vulnerability that stems fro...
VMware Cloud Foundation Directory Traversal Vulnerability
VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware. The platform includes features such as operations automation, infrastructure auto-configuration and integrated lifecycle management. A directory traversal vulnerability exists in VMware Cloud Foundation, which stems from ...
CVE-2023-32260
Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X SMAX, OpenText™ Asset Management X AMX, and OpenText™ Hybrid Cloud Management X HCMX products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X SMAX...
VMware Cloud Foundation 安全漏洞
VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware. The platform includes features such as operations automation, infrastructure auto-configuration and integrated lifecycle management. An information disclosure vulnerability exists in VMware Cloud Foundation, which can be...