A significant security vulnerability has been uncovered in the Sophos Firewall User Portal and Webadmin, potentially allowing remote hackers to execute malicious code. This flaw permits attackers to insert harmful code into the software, potentially leading to complete system takeover and data breaches. Sophos has responded by releasing updated versions of their firewalls to detect …
The FBI, NSA, and other collaborating agencies have issued a warning regarding the widespread exploitation of CVE-2023-42793 by cyber actors affiliated with the Russian Foreign Intelligence Service (SVR). These actors, also known as Advanced Persistent Threat 29 (APT 29), Dukes, CozyBear, and NOBELIUM/Midnight Blizzard, have been targeting servers hosting JetBrains TeamCity software since September 2023. …
Russian Cyber Actors Exploit JetBrains Vulnerability: FBI and NSA Issue Warning Read More »
On December 6, 2023, the Federal Office for Information Security (BSI) issued a security advisory regarding Atlassian products. The security vulnerability affects UNIX, Linux, and Windows operating systems, as well as Atlassian Bitbucket, Atlassian Confluence, and Atlassian Jira Software. For the latest manufacturer recommendations regarding updates, workarounds, and security patches for this vulnerability, please refer …
Recent revelations by cybersecurity researchers from the Systems and Network Security Group at VU Amsterdam have brought to light a sophisticated new attack vector known as SLAM (Spectre based on Linear Address Masking). This attack exploits vulnerabilities inherent in modern CPUs, particularly those anticipated in upcoming products from Intel, AMD, and Arm. SLAM takes advantage …
Unmasking SLAM: Exploiting CPU Security Features for Spectre Attacks Read More »
Microsoft revealed on Monday that it had uncovered Kremlin-backed nation-state activity exploiting a now-patched critical security flaw in its Outlook email service, allowing unauthorized access to victims’ accounts within Exchange servers. The intrusions were attributed to a threat actor dubbed Forest Blizzard (formerly Strontium), also known as APT28, BlueDelta, Fancy Bear, and various other aliases. …
Threat actors can exploit the Amazon Web Services Security Token Service (AWS STS) to infiltrate cloud accounts and carry out subsequent attacks. This service allows them to impersonate user identities and roles within cloud environments, enabling unauthorized access and malicious actions, as highlighted by Red Canary researchers Thomas Gardner and Cody Betsworth in a recent …
Securing Cloud Environments: Understanding and Mitigating AWS Token Exploitation Read More »