Stopping Credential Stuffing Attacks: We Need to Do Better

Do you know what 23andMe, Jason's Deli, North Face, and Hot Topic have in common? They've all been breached by successful credential stuffing attacks in the last year! An attack type that h ...

Continue Reading
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Apache Santuario

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Apache Santuario. Vulnerability Details ** CVEID: CVE-2023-44483 DESCRIPTION: **Apache Santuario cou ...

Continue Reading
@lobehub/chat vulnerable to unauthorized access to plugins

Description: When the application is password-protected (deployed with the ACCESS_CODE option), it is possible to access plugins without proper authorization (without password). Proof-of-Concept: Let� ...

Continue Reading
@lobehub/chat vulnerable to unauthorized access to plugins

Description: When the application is password-protected (deployed with the ACCESS_CODE option), it is possible to access plugins without proper authorization (without password). Proof-of-Concept: Let� ...

Continue Reading
Identify and De-Risk Unmanaged, Unauthorized Devices With Qualys CyberSecurity Asset Management (CSAM)

69% of organizations said they experienced at least one cyberattack resulting from an exploit of an unknown or unmanaged asset such as software, cloud-based workloads user accounts, and IoT devices. U ...

Continue Reading
Buildkit’s interactive containers API does not validate entitlements check

Impact In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run ...

Continue Reading
Buildkit’s interactive containers API does not validate entitlements check

Impact In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run ...

Continue Reading
Stopping Credential Stuffing Attacks: We Need to Do Better

Do you know what 23andMe, Jason's Deli, North Face, and Hot Topic have in common? They've all been breached by successful credential stuffing attacks in the last year! An attack type that h ...

Continue Reading

Back to Main

Subscribe for the latest news: