Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining

Exposed Kubernetes K8s clusters are being exploited by malicious actors to deploy cryptocurrency miners and other backdoors. Cloud security firm Aqua, in a report shared with The Hacker News, said a majority of the clusters belonged to small to medium-sized organizations, with a smaller subset ti...

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to circumvent security restrictions.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Alert: New Electromagnetic Attacks on Drones Could Let Attackers Take Control

Drones that don't have any known security weaknesses could be the target of electromagnetic fault injection EMFI attacks, potentially enabling a threat actor to achieve arbitrary code execution and compromise their functionality and safety. The research comes from IOActive, which found that it is...

The vulnerability of the Azure Service Connector allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Azure Service Connector relates to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain increased privileges...

The vulnerability of the Mark of the Web operating system mechanism, which allows a hacker to circumvent existing security restrictions

The vulnerability of the Mark of the Web operating system mechanism is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Linux operating system’s kernel allows a hacker to bypass the secure boot mechanism and gain increased privileges.

The vulnerability of the Linux operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass secure boot mechanisms and increase their privileges...

The vulnerability of the XFCE desktop environment application library allows a hacker to execute arbitrary code.

The vulnerability of the XFCE desktop environment application library is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created .desktop file from a remote location...

The vulnerability of the Windows Common Log File System Driver in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of Mozilla Firefox’s Content Security Policy component allows a perpetrator to circumvent existing security restrictions.

The vulnerability of Mozilla Firefox’s Content Security Policy component is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Active Directory Federation Services (AD FS) for Windows operating systems allows a perpetrator to circumvent security restrictions and enhance their privileges.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and increase their privileges...

Mitigation of Supply Chain Risks in Microsoft 365

In this blog we review five attack techniques exploited to compromise MS 365 tenants. Qualys SaaS Detection & Response can be used by both IT and security teams to assess these threats, and then to fix common misconfigurations, hardening supply chain defenses. Last October, news of Microsoft 365 ...

The vulnerability of the Autofill function in Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Autofill function in Google Chrome browser is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created malicious HTML page...

How to Tackle SaaS Security Misconfigurations

Whether it's Office 365, Salesforce, Slack, GitHub or Zoom, all SaaS apps include a host of security features designed to protect the business and its data. The job of ensuring these apps' security settings are properly configured falls on the security team. The challenge lies within how burdenso...

Predicting the Next OWASP API Security Top 10

As a long-time OWASP member and application security practitioner, I wanted to share my thoughts on how the newly released OWASP Web App Top 10 might impact or influence the updates to the API Security Top 10, last released back in December 2019. These lists cover the most common causes for...

The vulnerability of the Active Directory Federation Services (ADFS) on the Windows operating system allows a perpetrator to bypass the security measures.

The vulnerability of the Active Directory Federation Services AD FS on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security measures...

Germ-term, but all year. How criminals are hacking schools

In some schools, the autumn term is often called “germ-term” due to the number of bugs the children bring back after the summer holidays. It usually calms down after a few weeks, however, with hacking there is no slow down. Its all year, its relentless. In the last 10 months of this year schools...

Complicated Active Directory setups are undermining security

Security researchers and technical architects from SpecterOps have found that almost every Active Directory installation they have looked at over the last decade has had some kind of misconfiguration issue. And misconfigurations can lead to security issues, such as privilege escalation methods. T...

The vulnerability of SSH clients on operating systems such as iOS, iPadOS, macOS, tvOS, and watchOS allows attackers to compromise the integrity of protected information.

The vulnerability of SSH clients for operating systems such as iOS, iPadOS, macOS, tvOS, and watchOS is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information from a remote perspective...

The vulnerability of Google Chrome’s JavaScript script handlers allows attackers to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of Google Chrome’s JavaScript script handler is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain unauthorized access to protected information through a specially created URL page...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to security configuration errors, allowing attackers to exploit their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...