Edward Targett

Ed is co-founder of The Stack. He has worked in journalism for 15 years, most recently for the New Statesman's Tech Monitor. His interests span infosec, energy, foreign policy and sustainability.

London

Pre-auth RCE zero days in Ivanti VPNs are being exploited by a Chinese APT and there won’t be a patch for weeks. Buckle up.

Attackers re-write JavaScript loaded by the VPN login page for the Appliance to capture credentials; also grabbed Veeam credentials, moved laterally for full SYSTEM control.

janvier 10, 2024

Patch Tuesday brings lots of chaff, a little buggy wheat too. Some CVE highlights to review.

One vulnerability bears a striking resemblance to an 0day that was actively exploited in the wild in November 2023.

janvier 10, 2024

How SEGA’s Felix Baker delivered a data transformation

“We have our low latency stream which goes into MongoDB; we have our main engineering pipeline, which goes to S3 and gets encrypted for GDPR purposes. Then we have a Spark stream, which pulls the data into Delta Lake..."

janvier 09, 2024