Content Paint

cybersecurity

Millions affected by 10-year old bug in a Linux utility that gives root.

Full root privileges on Ubuntu 20.04, Debian 10, and Fedora 33 demonstrated.

This AWS API bug lets you check permissions without generating logs in CloudTrail: It's not getting fixed.

Some 645 different API actions across 40 different AWS services affected.

A social engineering campaign is specifically - and successfully - targeting security researchers.

Possible a Chrome 0day is to blame.

SonicWall says VPN *is* safe after 0day breach of its mobile access tool - SMA 100 requires remediation.

"A coordinated attack on internal systems by highly sophisticated threat actors"

SAP's "Active Directory-equivalent" has a CVSS 10-rated critical bug

Security experts warn that unpatched vulns remain better than 0days for attackers.

Pre-auth RCE vulnerabilities in Cisco's SD-WAN give attackers root privileges.

"Execute arbitrary code on the underlying OS with root privileges".

Malwarebytes the latest victim of SolarWinds attackers: Here's how the threat group is pivoting to Azure/O365 tenants - and how to secure them.

Help yourself to a third free tool to audit AD permission.

Dridex crimeware is back with a vengeance - and now it's dropping ransomware too.

Malicious Excel docs are the most common dropper.

NSA: DNS-over-HTTPS "no panacea". NCSC: Handy if *we* run it, though.

DoH can "bring issues to enterprises, including a false sense of security" says NSA.

Search the site

Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Great! You've successfully signed up.
Great! You've successfully signed up.
Welcome back! You've successfully signed in.
Success! You now have access to additional content.