Mitigating IngressNightmare: Protecting Your Kubernetes Cluster from RCE Risks
As containerization continues to gain traction, Kubernetes has become an essential platform for many organizations. One crucial component in a Kubernetes cluster is Ingress, which manages the flow of external traffic to services. Given its importance, Ingress also carries significant security risks, especially when vulnerabilities are exploited. In this post, we’ll explore a set of […]
Thousands of Australians’ IDs and Bank Details Exposed in Vroom Data Leak
In a concerning data breach, Vroom by YouX, Australia’s largest online marketplace for car loans, has exposed sensitive personal and financial information of thousands of individuals. The breach, discovered by cybersecurity researcher Jeremiah Fowler, left 27,000 records of highly sensitive user data publicly accessible online. What Data Was Exposed? The exposed data includes a range […]
LockBit Ransomware Developer Extradited to the US: Major Win in Cybercrime Crackdown!
In a significant step forward in the fight against cybercrime, the US Justice Department has announced the extradition of Rostislav Panev, a key LockBit ransomware developer, from Israel to the United States. This move comes after his arrest in August 2024, where he was accused of playing a pivotal role in the development and spread […]
Protecting Your Business from Phishing Attacks: A Rising Threat to Corporate Networks
Phishing continues to be one of the most significant threats to cybersecurity, and its methods are becoming increasingly sophisticated. A recent report highlights a new and particularly dangerous phishing campaign targeting corporate credentials, using decentralized platforms like the Interplanetary File System (IPFS) to evade detection. This new approach makes these phishing sites more resilient and […]
Critical OpenSSH Vulnerabilities Patched: MitM and DoS Attack Risks Addressed
On Tuesday, the OpenSSH development team released security patches to address two critical vulnerabilities in its widely-used open-source implementation of the Secure Shell (SSH) protocol. These vulnerabilities, one of which allows exploitation without user interaction and the other without requiring authentication, pose significant risks, including Man-in-the-Middle (MitM) and Denial-of-Service (DoS) attacks. Overview of OpenSSH OpenSSH […]
GrubHub Data Breach: Personal Information Compromised
On Monday, GrubHub, a prominent food delivery service, disclosed a significant data breach that compromised sensitive information belonging to both customers and drivers. The breach was identified following unusual activity within the company’s environment, prompting a thorough internal investigation. The investigation revealed that unauthorized access had been gained to an account associated with a third-party […]
Ongoing Brute Force Login Attacks Targeting Network Devices: Over 2 Million IPs Involved
January 2025 Update: Surge in Cyber Attacks Threatens Critical Network Devices The Shadowserver Foundation has raised a critical alarm regarding an escalating cyber attack campaign, with over 2 million unique IP addresses targeting the web login panels of various network devices. This ongoing brute force login attack is affecting high-profile vendors, including Palo Alto Networks, […]
Building A Cyber Aware Culture
In today’s technologically driven world, cyber threats are evolving constantly and becoming more sophisticated. With the expanding reliance on technology, safeguarding critical infrastructure and sensitive data has become increasingly imperative. Establishing a strong cybersecurity culture within an organization stands as one of the most effective ways to combat these threats. This entails fostering an environment […]
Passwordless – What Does the Future Hold
Passwordless login is promoted as the future of user authentication, offering enhanced security and a better user experience as key reasons for its adoption. In this article, you will discover what password-less authentication is and how the most prevalent password-less login methods operate. Additionally, it will discuss some limitations and challenges associated with password-less authentication. […]
Morgan Stanley: Has to pay $6.5 Million due poor data security practice
Morgan Stanely has agreed to pay $6.5 million settlement on insecurely disposing hardware containing unencrypted personal information. The Florida Attorney General’s said, the multinational investment bank and financial services company Morgan Stanely exposed the personal information of millions of customers, due to lack of data-security practices. On investigating the incident, the company disclosed that, it […]
