Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets AndroidsHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2024MalwareCVE-2024-5805CVE-2024-5806CVE-2024-527660
Enterprises increasingly turn to cloud and AI for database managementHelp Net Security·Jun 27, 00:00 UTC · Jun 27, 2024Industry30
Gaining Visibility Within Container ClustersPalo Alto Unit 42·Jun 5, 22:42 UTC · Jun 5, 2024VulnerabilityCVE-2021-26084147
Kinsing Hacker Group Exploits More Flaws to Expand Botnet for CryptojackingThe Hacker News·May 22, 03:20 UTC · May 22, 2024Malware30
Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete TakeoverThe Hacker News·May 4, 08:19 UTC · May 4, 2024VulnerabilityCVE-2024-28185CVE-2024-28189CVE-2024-2902160
Damn Vulnerable RESTaurant: Open-source API service designed for learningHelp Net Security·Apr 17, 00:00 UTC · Apr 17, 2024Vulnerability130
Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)Help Net Security·Apr 8, 13:25 UTC · Apr 8, 2024VulnerabilityCVE-2024-309460
Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux DistrosThe Hacker News·Apr 2, 04:39 UTC · Apr 2, 2024Malware in the wildCVE-2024-309460
What we know about the xz Utils backdoor that almost infected the worldArs Technica · Security·Apr 1, 06:55 UTC · Apr 1, 2024Malware55
Universal Data Permissions Scanner: Open-source tool to overcome data authorization blindspotsHelp Net Security·Jan 8, 14:08 UTC · Jan 8, 2024Tools55
MariaDB acquires CubeWerx to deliver geospatial capabilities for developersHelp Net Security·Jan 8, 14:00 UTC · Jan 8, 2024AI tools & infra30
SnapLogic unveils new AI capability to automatically build end-to-end integration pipelinesHelp Net Security·Dec 14, 12:23 UTC · Dec 14, 2023AI tools & infra30
Open-source code: How to stay secure while moving fastHelp Net Security·Dec 12, 12:52 UTC · Dec 12, 2023Vulnerability42
27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT ExpertsThe Hacker News·Nov 17, 12:15 UTC · Nov 17, 2023Malware42
Developers can’t seem to stop exposing credentials in publicly accessible codeArs Technica · Security·Nov 15, 00:00 UTC · Nov 15, 2023AI tools & infra130
Leaving Authentication Credentials in Public CodeSchneier on Security·Nov 15, 00:00 UTC · Nov 15, 2023Vulnerability30
Protecting your IT infrastructure with Security Configuration Assessment (SCA)The Hacker News·Oct 3, 11:48 UTC · Oct 3, 2023Vulnerability55
Cybercriminals target MS SQL servers to deliver ransomwareHelp Net Security·Sep 6, 00:00 UTC · Sep 6, 2023Ransomware157
TeamTNT's Cloud Credential Stealing Campaign Now Targets Azure and Google CloudThe Hacker News·Jul 17, 04:40 UTC · Jul 17, 2023Threat actor45
Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code ExecutionThe Hacker News·Jun 28, 07:24 UTC · Jun 28, 2023VulnerabilityCVE-2023-28424160
OneTrust announces new features to help organizations automate data discovery and classificationHelp Net Security·Jun 9, 00:00 UTC · Jun 9, 2023Policy & legal30
New Go-written GobRAT RAT targets Linux Routers in JapanSecurity Affairs·May 29, 13:44 UTC · May 29, 2023Malware42
New GobRAT Remote Access Trojan Targeting Linux Routers in JapanThe Hacker News·May 29, 09:50 UTC · May 29, 2023Malware30
Severe Flaw in Google Cloud's Cloud SQL Service Exposed Confidential DataThe Hacker News·May 26, 16:25 UTC · May 26, 2023Vulnerability55
Vaultree unveils Fully Functional Data-In-Use Encryption solution for the healthcare sectorHelp Net Security·May 23, 00:00 UTC · May 23, 2023Data breach60
BMW exposes data of clients in Italy, experts warnSecurity Affairs·Mar 10, 07:19 UTC · Mar 10, 2023Vulnerability30
Experts devised a technique to bypass web application firewalls (WAF) of several vendorsSecurity Affairs·Dec 9, 09:29 UTC · Dec 9, 2022Vulnerability30
Hundreds of Amazon RDS Snapshots Discovered Leaking Users' DataInfosecurity Magazine·Nov 17, 16:00 UTC · Nov 17, 2022Threat actor57
Researchers Discover Hundreds of Amazon RDS Instances Leaking Users' Personal DataThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2022Ransomware57
MS SQL servers are getting hacked to deliver ransomware to orgsHelp Net Security·Sep 27, 00:00 UTC · Sep 27, 2022Ransomware57
Researchers Disclose Critical Vulnerability in Oracle Cloud InfrastructureThe Hacker News·Sep 22, 10:43 UTC · Sep 22, 2022Vulnerability55
Datadog expands support for Microsoft SQL Server and Azure database servicesHelp Net Security·Aug 18, 00:00 UTC · Aug 18, 2022Industry30
Manjusaka: A Chinese sibling of Sliver and Cobalt StrikeCisco Talos·Aug 2, 12:00 UTC · Aug 2, 2022Malware55
Kasten by Veeam K10 V5.0 provides secure backup and recovery for Kubernetes data and applicationsHelp Net Security·May 17, 00:00 UTC · May 17, 2022Ransomware60
Sigma Computing appoints Brian Murphy as CROHelp Net Security·May 15, 00:00 UTC · May 15, 2022AI tools & infra30
Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data FactoryThe Hacker News·May 10, 09:48 UTC · May 10, 2022VulnerabilityCVE-2022-2997247
QNAP users are recommended to disable UPnP port forwarding on routersSecurity Affairs·Apr 20, 06:41 UTC · Apr 20, 2022Ransomware57
Nutanix launches simplified cloud solution packages for hybrid cloud infrastructureHelp Net Security·Feb 17, 00:00 UTC · Feb 17, 2022Industry30