NAME Elasticsearch Elastic Cloud Enterprise information disclosure Platforms Affected:Elasticsearch Elastic Cloud Enterprise 3.3.0Risk Level:8.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION Elasticsearch Elastic Cloud Enterprise...
The threat actors behind Twilio and Cloudflare attacks have been linked to a phishing campaign that targeted other 136 organizations. The threat actors...
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-27925Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives...
Password management software firm LastPass has suffered a data breach, threat actors have stole source code and other data. Password...
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Explore the drivers behind switching from VPN to Zero Trust Network Access (ZTNA) for any device access from anywhere. If...
Learn how Lambda and IAM unlock the power and versatility of the cloud by implementing a serverless User API that...
A new piece of ransomware written in the Go language has been targeting healthcare and education enterprises in Asia and...
LastPass have released the below statement regarding a compromise to the development environment. Dear valued customer,We are writing to inform...
CISA Adds Ten Known Exploited Vulnerabilities to Catalog CISA has added ten new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on...
Russia-linked APT group Nobelium is behind a new sophisticated post-exploitation malware tracked by Microsoft as MagicWeb. Microsoft security researchers discovered...
Programme HackerOne MTN Group MTN Group Submitted by theranger theranger Report Default Login Credentials on https://broadbandmaps.mtn.com.gh/ Full Report A considerable...
Programme HackerOne Internet Bug Bounty Internet Bug Bounty Submitted by albinowax albinowax Report Pause-based desync in Apache HTTPD Full Report...
Programme HackerOne Stripo Inc Stripo Inc Submitted by deb0con deb0con Report Non-revoked API Key Information disclosure via Stripo_report() Full Report...
Programme HackerOne GitLab GitLab Submitted by mega7 mega7 Report Unauthorized access Full Report A considerable amount of time and effort...
CISA releases 1 Industrial Control Systems Advisory CISA has released 1 Industrial Control Systems (ICS) advisory on August 25, 2022....
