Cybersecurity
WordPress is a favorite blogging tool of mine and I share tips and tricks for using WordPress here.
-
Fortinet exploits: Attackers tampered with firewall firmware
“System enters error-mode due to FIPS error: Firmware Integrity self-test failed” suggests compromises.
Read More » -
Veeam urges “immediate” updates after vulnerability exposes backup hosts
This may generate a lot of Black Hat interest...
Read More » -
This critical Microsoft Word RCE exploit requires just a few lines of code: We need more CHERI
POC lands for CVSS 9.8 Word bug CVE-2023-21716
Read More » -
US agencies warn over “Royal” ransomware rise
Phishing is key threat vector and a Blue Team bête noire...
Read More » -
Novel cloud attack pivoted from K8s to Lambda, pulled IAM keys from Terraform
A recent attack tracked by researchers at cloud security company Sysdig saw the attackers use an exposed Kubernetes container to…
Read More » -
Server backup vulnerability piggybacked to live systems
Open source bug leads to server backup bug leads to... crime.
Read More » -
New LastPass breach post-mortem raises questions
Attackers targeted DevOps engineers' home devices...
Read More » -
Pentagon CIOs slapped over cloud security by auditors days before 3TB of emails exposed
Days before the exposure this week of over three terabytes of military emails owing to misconfigured Azure services, the US…
Read More » -
IBM high speed file transfer software exploited by hackers
A pre-auth RCE in IBM Aspera Faspex is being exploited in the wild
Read More » -
AWS EC2 permissions configuration change draws cheers, confusion
What... what's happening here exactly?
Read More »