Tag: misconfiguration
Expired Redis Service Abused to Use Metasploit Meterpreter Maliciously
Attackers are using an 8-year-old version of the Redis open-source database server to maliciously use Metasploit's Meterpreter module to expose exploits within a system,...
Breaking News
‘Lucifer’ Botnet Turns Up the Heat on Apache Hadoop Servers
A threat actor is targeting organizations running Apache Hadoop and Apache Druid big data technologies with a new version of the Lucifer botnet, a...
Google Kubernetes Clusters Suffer Widespread Exposure to External Attackers
The authentication mechanism within the Google Kubernetes Engine (GKE) has a loophole that could allow an external attacker with any Google account to access...
Time to Secure Cloud-Native Apps Is Now
The news headlines are full of breaches and data exposures that are the result of unsecured cloud-native applications and application programming interfaces (APIs) —...
Missing the Cybersecurity Mark With the Essential Eight
COMMENTARYIn recent years, Australia has made some key moves to improve the country's security posture. In 2020, the country invested AUD $1.67 billion (US$1.1...
The 7 deadly cloud security sins and how SMBs can do things better
Business Security By eliminating these mistakes and blind spots, your organization can take massive strides towards optimizing its use of cloud without exposing...
Attacker Targets Hadoop YARN, Flint Servers in Stealthy Campaign
A threat actor is targeting a common misconfiguration in Hadoop YARN and Apache Flink to try and drop Monero cyrptominers in environments running the...
In Cybersecurity and Fashion, What’s Old Is New Again
COMMENTARYWhile distributed denial-of-service (DDoS) attacks and zero-day threats are nothing new in cybersecurity, they're still happening regularly for a simple reason: They work. In...
A year in review: 10 of the biggest security incidents of 2023
Digital Security As we draw the curtain on another eventful year in cybersecurity, let’s review some of the high-profile cyber-incidents that occurred in...
Another Crypto Hack Affects 9 Major Russian Exchanges
Tyler Cross Published on: December 14, 2023 An attack on a slew of Russian cryptocurrency exchange platforms recently had...
Google Cloud’s ‘Dataproc’ Abuse Risk Endangers Corporate Data Stores
Lackluster security controls in one of Google's cloud services for data scientists could allow hackers to create applications, execute operations, and access data in...
Best ETH Staking Pools in 2024: Our Top Picks!
Staking unused crypto is fast becoming a reliable avenue for enthusiasts to participate in blockchain networks while earning rewards. Whether it's running a personal...
Wiz Launches AI Security Posture Management (AI-SPM)
NEW YORK, Nov 17, 2023 - (ACN Newswire) - Wiz today announces the addition of Wiz for AI Security to its Cloud Native Application Protection...
Latest Intelligence
