Collaborate Disseminate
Thousands of Postman workspaces leaked sensitive data like API keys and tokens. Learn best practices to secure your API development environment and protect your organization Continue reading Postman Workspaces Leak 30000 API Keys and Sensitive Tokens
Popular npm packages, Rspack and Vant, were recently compromised with malicious code. Learn about the attack, the impact, and how to protect your projects from similar threats. Continue reading Supply Chain Attack Hits Rspack, Vant npm Packages with Monero Miner
We are facing a challenge with managing vulnerabilities in certain open-source libraries used in our enterprise product. The current versions of these libraries have known vulnerabilities flagged by our customer’s security team, but upgrad… Continue reading Best Practices for Managing Open-Source Vulnerabilities in Enterprise Deployments
Androxgh0st, a botnet targeting web servers since January 2024, is also deploying IoT-focused Mozi payloads, reveals CloudSEK’s latest research. Continue reading Androxgh0st Botnet Targets IoT Devices, Exploiting 27 Vulnerabilities
BeyondTrust has fixed an unauthenticated command injection vulnerability (CVE-2024-12356) in its Privileged Remote Access (PRA) and Remote Support (RS) products that may allow remote code execution, and is urging organizations with on-premise installat… Continue reading BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)
SUMMARY The Cl0p ransomware group has recently claimed responsibility for exploiting a critical vulnerability in Cleo’s managed file… Continue reading Cl0p Ransomware Exploits Cleo Vulnerability, Threatens Data Leaks
SUMMARY The Cl0p ransomware group has recently claimed responsibility for exploiting a critical vulnerability in Cleo’s managed file… Continue reading Cl0p Ransomware Exploits Cleo Vulnerability, Threatens Data Leaks
Find out the key security risks of firmware security: Identify threats, and learn best practices and protection methods… Continue reading Firmware Security: Identifying Risks to Implement Best Cybersecurity Practices
Lawrence Abrams reports: The Clop ransomware gang has confirmed to BleepingComputer that they are behind the recent Cleo data-theft attacks, utilizing zero-day exploits to breach corporate networks and steal data. Cleo is the developer of the managed f… Continue reading Clop ransomware claims responsibility for Cleo data theft attacks
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft’s Multi-Factor Authentication (MFA), known as AuthQuake,… Continue reading AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts