AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery (SSRF) attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measure…
A married couple from New York City has pleaded guilty to money laundering charges in connection with the 2016 hack of cryptocurrency stock exchange Bitfinex, resulting in the theft of about 120,000 bitcoin.
The development comes more than a year after…
Privileged Access Management (PAM) solutions are widely acknowledged as the gold standard for securing critical privileged accounts. However, many security and identity teams face inherent obstacles during the PAM journey, hindering these solutions fro…
Cybersecurity researchers have discovered a new bunch of malicious packages on the npm package registry that are designed to exfiltrate sensitive developer information.
Software supply chain firm Phylum, which first identified the “test” packages on Ju…
A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022.
“In 2022, malicious cyber actors exploited older software vulnerabilities more frequently t…
I’m creating a pastebin-style application which stores notes and has the following options:
Ephemeral, where it is deleted as soon as it is read
Encrypted, where the content is encrypted before being sent to the server (used to determine …
Wordpress Plugin EventON Calendar 4.4 – Unauthenticated Event Access
Xlight FTP Server 3.9.3.6 – ‘Stack Buffer Overflow’ (DOS)
Webedition CMS v2.9.8.8 – Remote Code Execution (RCE)
Campcodes Online Matrimonial Website System v3.3 – Code Execution via malicious SVG file upload
