Jan 10, 2023Ravie LakshmananSoftware Security / Supply Chain A high-severity security flaw has been disclosed in the open source jsonwebtoken (JWT) library that, if successfully …
9 Things you cant do If you are The Only Person on Earth !
Things you cant be If you are The Only Person on Earth You cant be Selfish You cant be a Narcissist you cant be wicked …
Kinsing Crypto Malware Hits Kubernetes Clusters via Misconfigured PostgreSQL
Jan 09, 2023Ravie LakshmananKubernetes / Cryptojacking The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain …
Kinsing Cryptojacking Hits Kubernetes Clusters via Misconfigured PostgreSQL
Jan 09, 2023Ravie LakshmananKubernetes / Cryptojacking The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain …
New Study Uncovers Text-to-SQL Model Vulnerabilities Allowing Data Theft and DoS Attacks
Jan 09, 2023Ravie LakshmananDatabase Security / PLM Framework A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that …
Why Do User Permissions Matter for SaaS Security?
Jan 09, 2023The Hacker NewsSaaS Security / SSPM Solution Earlier this year, threat actors infiltrated Mailchimp[1], the popular SaaS email marketing platform. They viewed over …
Millions of Vehicles at Risk: API Vulnerabilities Uncovered in 16 Major Car Brands
Jan 09, 2023Ravie LakshmananAutomotive Security Multiple bugs affecting millions of vehicles from 16 different manufacturers could be abused to unlock, start, and track cars, plus …
Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through Firewalls
Jan 09, 2023Ravie LakshmananNetwork Security / Supply Chain In yet another campaign targeting the Python Package Index (PyPI) repository, six malicious packages have been found …
Top SaaS Cybersecurity Threats in 2023: Are You Ready?
Jan 09, 2023The Hacker NewsWeb Security / SaaS Security Cybercriminals will be as busy as ever this year. Stay safe and protect your systems and …
Hackers Can Abuse Visual Studio Marketplace to Target Developers with Malicious Extensions
Jan 09, 2023Ravie LakshmananSupply Chain / CodeSec A new attack vector targeting the Visual Studio Code extensions marketplace could be leveraged to upload rogue extensions …
