IOS 14.5 will hides User IPAdresses from google
Apple's upcoming iOS 14.5 release will ship with a feature that will re-route all Safari's Safe Browsing traffic through Apple-controlled proxy servers as a workaround to preserve user privacy and…
Datadog acquires Sqreen App Sec platform
Sqreen is a cloud-based security product to protect your application directly. Once you install the sandboxed Sqreen agent, it analyzes your application in real time to find vulnerabilities in your…
Posted incloudsecurity
SaaS growing Ransomware threat
Software-as-a-service (SaaS) applications have emerged as a new target for ransomware, and had the highest count of vulnerabilities that were seen trending with active exploits. Ransomware targeting 12 SaaS products…
Posted incloudsecurity
WebShell Attack on a Rise
The number of monthly web shell attacks has almost doubled since last year, with an average of 140,000 such malicious tools being found on compromised servers every month Microsoft stated Web…
Avaadon Ransomware Decryptor… Effective for a short time
The Spanish student Javier Yuste has released a free decryption tool for the Avaddon ransomware that can be used by the victims to recover their encrypted files for free. The…
Posted incloudsecurity
Dependency Confusion technique
Security researchers has detailed a supply chain attack technique called Dependency Confusion or a Substitution Attack, which can attack hybrid package manager configurations inside large corporations. Poisoning process The Dependency Confusion technique…
Application Patching Need of an hour
Software without the most recent patch is like an unlocked door for threat actors. They know the openings are there and can just walk in. But patching and a software…
Zerologon Enforcement Mode
The Netlogon distant code execution vulnerability, disclosed final August, has been weaponized by APT teams.Microsoft has launched part two mitigation for the important Zerologon vulnerability disclosed in August 2020. CVE-2020-1472…