Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk Oct 17, 2024Ravie LakshmananVulnerability / Kubernetes A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain circumstances. The vulnerability, tracked as CVE-2024-9486 (CVSS score: Read more…
GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access Oct 16, 2024Ravie LakshmananEnterprise Security / Vulnerability GitHub has released security updates for Enterprise Server (GHES) to address multiple issues, including a critical bug that could allow unauthorized access to an instance. The vulnerability, tracked as CVE-2024-9487, carries a Read more…
Hackers Selling Access To CoWin Portal in The Dark Web CoWin Indian’s digital platform seems to be in Hacker’s hands. Hackers Selling Access To CoWin Portal in a popular Underground forum. CoWin is a digital platform used by the Indian Government to support its mass vaccination program. The platform provides Read more…
Transforming Access: The Power of Biometrics Introduction: The Rise of Biometric Technology Biometric technology has been rapidly growing in popularity across various sectors, revolutionising the way access is controlled and managed. From unlocking smartphones with a fingerprint to securing data centres with facial recognition, the applications of biometrics are expanding. Read more…
The Future of (Privileged) Access Management In IT environments, some secrets are managed well and some fly under the radar. Here’s a quick checklist of what kinds of secrets companies typically manage, including one type they should manage: Passwords [x] TLS certificates [x] Accounts [x] SSH keys ??? The secrets Read more…
Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers Sep 27, 2024Ravie LakshmananContainer Security / Cloud Computing A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the confines of a container and Read more…
New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating system’s permissions-based model, which revolves around the Transparency, Consent, and Read more…
AI Company Hugging Face Detects Unauthorized Access to Its Spaces Platform Artificial Intelligence (AI) company Hugging Face on Friday disclosed that it detected unauthorized access to its Spaces platform earlier this week. “We have suspicions that a subset of Spaces’ secrets could have been accessed without authorization,” it said in Read more…
APT42 Hackers Pose as Journalists to Harvest Credentials and Access Cloud Data The Iranian state-backed hacking outfit called APT42 is making use of enhanced social engineering schemes to infiltrate target networks and cloud environments. Targets of the attack include Western and Middle Eastern NGOs, media organizations, academia, legal services and activists, Google Cloud subsidiary Mandiant said Read more…
Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases European Police Chiefs said that the complementary partnership between law enforcement agencies and the technology industry is at risk due to end-to-end encryption (E2EE). They called on the industry and governments to take urgent action to ensure Read more…