Kubernetes instances exposed in open internet
Shadowserver Foundation has scanned internet for Kubernetes API servers and found roughly 380,000 that allow some form of access. ShadowServer is conducting daily scans of the IPv4 space on ports…
Discord NFT Targeted Maliciously
Hackers have targeted Discord groups in an attempt to get users to click on malicious links. NFTs are assets built on blockchain technology to represent artwork, videogames and other digital…
Patch Known Exploits Fast Rather Than Going Behind Zero Days
Enterprise IT security strategies should align by patching their systems for known vulnerabilities, rather than chasing a fix for every zero-day that emerges – a research study on APT revealed.…
WordPress Jupiter Plugin bug could lead to Privilege Escalation
WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. Jupiter is…
Threat Actors evade and target Sql servers
Microsoft Security Intelligence comes with a warning about an attack campaign targeting SQL servers and using a new approach to evade PowerShell monitoring. Threat actors are using sqlps.exe, a utility…
Recently patched VMware Bug exploited in wild
Security researchers at Barracuda discovered series of attempts were made to exploit the recent vulnerabilities CVE-2022-22954 and CVE-2022-22960, both reported last month. PoC exploitation that available in GitHub recently announced VMware bugs is being…
SharePoint RCE bug into the limelight again
A security researcher at StarLabs (Nguyễn Tiến Giang (Jang), found a fresh way to exploit a recently patched (February patch Tuesday) deserialization bug in Microsoft SharePoint and stage remote code…
Mozilla beefs up security with the release of version 100
Mozilla’s Firefox has introduced improved security mechanisms to reduce the browser attack surface in the 100th version released on May 3rd, 2022. Isolation of System Process When users browse the…