Cybersecurity Featured Kubernetes NCC Group security Kubernetes security audit warns over 19 issues, unfixed 2019 bugs NCC Group audit puts the spotlight on API, permissions weaknesses. Edward Targett April 19, 2023
Cybersecurity Featured Read This data breaches LastPass red team New LastPass breach post-mortem raises questions Attackers targeted DevOps engineers' home devices... The Stack February 28, 2023
Featured Read This open source security supply chain Global CISOs, White House, agree 10-point open source security plan All hands on deck, as Linux Foundation, Open SSF convene meeting The Stack May 13, 2022
Cybersecurity Featured vmware vulnerabilities Thousands of VMware customers publicly exposed to pre-auth RCE as exploit reproduced VMware Cloud Foundation, NSX-T, vRealize Suite, VMware Cloud suites, vRealize Automation, vRealize Log Insight all... Edward Targett April 07, 2022
Cybersecurity Featured Read This satcom Viasat "Misconfigured" VPN used to breach Viasat satellite network, malicious commands wiped modems Root cause analysis lands... The Stack March 31, 2022
Featured Read This APT China TTPs Revealed: Over 50 TTPs of Chinese state-backed hackers APT 40 APT exfiltrated data using Dropbox API, steganography to hide hoard in GitHub Edward Targett July 19, 2021