⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Microsoft patched a high-severity vulnerability in Active Directory Certificate Services (AD CS) that could enable attackers to conduct certificate-based attacks against domain environments. The Certighost flaw, as it came to be known, threatened the foundation of certificate-based authentication in Active Directory, potentially allowing adversaries to forge certificates, escalate privileges, or impersonate domain entities.
A new Mirai-derived botnet named Tengu has been discovered targeting Linux devices, using a hardware watchdog to reboot compromised systems if defenders attempt to terminate its main process. This persistence mechanism allows Tengu to relaunch itself, alongside other techniques like creating fake systemd services, modifying shell startup files, and altering reboot utilities.
A new Mirai-derived botnet called Tengu uses a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process, giving its other persistence mechanisms another chance to relaunch.
Researchers found 36,872 internet-exposed BMCs running IPMI, with 24,650 disclosing password hashes before login due to CVE-2013-4786 — an inherent flaw in the IPMI v2.0 specification. Over 30% of recovered hashes corresponded to passwords crackable within minutes, and since this is a protocol-level design issue, no patch is available from vendors.
Cybersecurity researchers have identified a significant vulnerability affecting Baseboard Management Controllers (BMCs) that exposes Intelligent Platform Management Interface (IPMI) password hashes before login. The issue, tracked as CVE-2013-4786 (CVSS score: 7.5), stems from a flaw in the IPMI v2.0 specification, allowing attackers to retrieve password hashes remotely via UDP port 623.
This sponsored article by Specops Software examines SSO deployment security against modern credential attacks, using the 2025 University of Pennsylvania breach — where a compromised PennKey SSO account led to data on 1.2 million individuals being stolen — as a case study. The article argues SSO concentrates risk, requiring robust protection.