TeamTNT Hits 150K Docker Containers via Malicious Cloud Images
September 14 2022Honeypot activity exposed two credentials that the threat actor is using to host and distribute malicious container images, security vendor says.
Read moreWeird Fallout from Peiter Zatko’s Twitter Whistleblowing
September 14 2022People are trying to dig up dirt on Peiter Zatko, better known as Mudge. For the record, I have not been contacted. I’m not sure if I should feel slighted.
Read moreKey Takeaways From the Twitter Whistleblower’s Testimony
September 14 2022Twitter did not know what data it had nor who had access to it, Peiter "Mudge" Zatko told Congressional lawmakers during a Senate panel hearing.
Read moreWormable Flaw, 0days Lead Sept. 2022 Patch Tuesday
September 14 2022This month's Patch Tuesday offers a little something for everyone, including security updates for a zero-day flaw in Microsoft Windows that is under active attack, and another Windows weakness...
Read moreBishop Fox Releases Cloud Enumeration Tool CloudFox
September 13 2022CloudFox is a command-line tool to help penetration testers understand unknown cloud environments.
Read moreBishop Fox Releases Cloud Enumeration Tool CloudFox
September 13 2022CloudFox is a command-line tool to help penetration testers understand unknown cloud environments.
Read moreMicrosoft Quashes Actively Exploited Zero-Day, Wormable Critical Bugs
September 13 2022In Microsoft's lightest Patch Tuesday update of the year so far, several security vulnerabilities stand out as must-patch, researchers warn.
Read moreSerious Security: Browser-in-the-browser attacks – watch out for windows that aren’t!
September 13 2022It sounds like a scam that could never work: use a picture of browser and convince the user it's a real browser. You might be surprised...
Read moreU-Haul Customer Contract Search Tool Compromised
September 13 2022Password compromise led to unauthorized access to a customer contract search tool over a five-month window, according to the company.
Read moreCyber spies are using legitimate apps for DLL sideloading, deploying an updated range of malware, including the new "Logdatter" info-stealer.
Read more
Recent Comments