⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This advisory covers two vulnerabilities in the Viidure Dashcam Android application: a misconfigured cloud storage bucket with public read access and hardcoded credentials in the app code. These flaws can expose sensitive user records, live footage, and system files.
A Vietnamese national was charged with money laundering for his role in a massive "pig butchering" scam, which defrauded a victim out of $16 million worth of cryptocurrency.
This article details Apple's release of emergency security updates for iPhones, iPads, and Macs to address a code execution vulnerability triggered by malicious files. Because it may already have been exploited in targeted attacks, users are urged to install the updates immediately.
We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities. The post OperTraitors: How Kubernetes Operators Betray Your Security Posture appeared first on Unit 42.
Attackers are using greater sophistication to gain access to high-yield targets like executives, and company-wide security measures can easily miss these subtle, personal attacks. Executive Threat Detection offers protection for up to 10 principals, with monthly custom threat hunts and reports relevant to those principals’ corporate systems.
Scammers created a convincing fake Apple preorder page for the newly announced iPhone Duo, offering a $500 voucher. The page triggers the DarkSword exploit chain on vulnerable iPhones just by visiting, with the goal of stealing sensitive data like credentials and cryptocurrency.