RSS Reader for Computer Security Articles
Categories: Exploits and vulnerabilities Categories: News Tags: Citrix Tags: NetScaler Tags: CVE-2023-3519 Tags: web shell A critical unauthenticated remote code execution vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway is being actively exploited |
The post CISA: You’ve got two weeks to patch Citrix NetScaler vulnerability CVE-2023-3519 appeared first on Malwarebytes Labs.
Read MoreCategories: Exploits and vulnerabilities Categories: News Researchers have uncovered a privilege escalation vulnerability in Google Cloud Build that could enable malicious actors tamper with application images and infect users. |
The post Google fixes “Bad.Build” Cloud Build flaw, researchers say it’s not enough appeared first on Malwarebytes Labs.
Read MoreCategories: News Tags: driver Tags: delivery Tags: amazon Tags: van Tags: camera Tags: recording Tags: footage Tags: online Tags: privacy In-van delivery driver footage is reportedly finding its way to the internet. Are privacy issues at play, or is a valuable safety tool? |
The post Amazon in-van delivery driver footage makes its way online appeared first on Malwarebytes Labs.
Read More
Credit to Author: David Buxton| Date: Thu, 20 Jul 2023 10:21:51 +0000
Episode 308 of the Kaspersky podcast looks at artificial intelligence, the FTC, Eurostar facial recognition and more.
Read MoreCategories: Awareness Categories: News Tags: Docker Tags: Docker Hub Tags: containerization Tags: secrets Tags: exposed Researchers have found that numerous Docker images shared on Docker Hub expose sensitive data. |
The post Docker Hub images found to expose secrets and private keys appeared first on Malwarebytes Labs.
Read MoreCategories: News Tags: Microsoft. MSA Tags: OWA Tags: validation token Tags: signing key Tags: Storm-0556 Tags: GetAccessTokensForResource Due to a validation error in Microsoft code, a suspected Chinese attacker was able to access user email from approximately 25 organizations, including government agencies. |
The post Microsoft validation error allowed state actor to access user email of government agencies and others appeared first on Malwarebytes Labs.
Read MoreCategories: Exploits and vulnerabilities Categories: News Tags: Zimbra Tags: MalasLocker Tags: vulnerability Tags: Google Tags: actively exploited Tags: fn:escapeXml Security experts are warning Zimbra users that a vulnerability for which there is no patch is being actively exploited in the wild. |
The post Act now! In-the-wild Zimbra vulnerability needs a workaround appeared first on Malwarebytes Labs.
Read MoreCategories: News Tags: week Tags: security Tags: July Tags: 2023 A list of topics we covered in the week of July 10 to July 16 of 2023 |
The post A week in security (July 10 – 16) appeared first on Malwarebytes Labs.
Read More