First malware targeting AWS Lambda's serverless platform discovered
A first-of-its-kind malware strain targeting Amazon Web Services' (AWS) Lambda serverless computing platform has been discovered.
Read the article ↗Ideas, technology
and news.
Articles and updates from the INNOTECH archive.
Practical guides ↗248 articles · Page 1 of 21
Researchers discover how Colibri malware persists on compromised systems
Cybersecurity researchers have described a simple but effective persistence mechanism adopted by a relatively new malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campaign.
Read the article ↗
New OpenSSL infinite-loop bug could let attackers crash remote servers
OpenSSL maintainers have released patches to address a high-severity security flaw in the software library that could cause a denial of service (DoS) when parsing certificates.
Read the article ↗
Critical security patches released by Microsoft, Adobe and other major software companies
Microsoft's March update is now officially available, with 71 fixes across software products including Windows, Office, Exchange and Defender.
Read the article ↗
Researchers warn of Linux kernel Dirty Pipe arbitrary-file overwrite vulnerability
Linux distributions are releasing patches to address a newly disclosed kernel security vulnerability that could let an attacker overwrite arbitrary data in read-only files and take full control of affected systems.
Read the article ↗
CISA adds Chrome and Magento zero-days to its urgent patching list
US authorities have added nine more exploited vulnerabilities for federal agencies to patch, including a zero-day bug used to compromise e-commerce websites.
Read the article ↗
Cisco releases a patch for critical bugs affecting Unified CCMP and Unified CCDM
Cisco Systems has released security updates for a critical vulnerability affecting Unified Contact Center Management Portal (Unified CCMP) and Unified Contact Center Domain Manager (Unified CCDM), which could allow a remote attacker to take control of an affected system.
Read the article ↗
How to prepare for PCI DSS v4 in 2022
Discussion of PCI DSS v4 became prominent with the first request for comments (RFC) in 2019, and has continued since then.
Read the article ↗
Active Directory bugs could let hackers take over Windows domain controllers
Microsoft is urging customers to patch two security vulnerabilities in Active Directory domain controllers that it addressed in November, following the release of a proof-of-concept (PoC) tool on 12 December.
Read the article ↗
Four-year Azure App Service flaw exposed hundreds of source-code repositories
A security flaw has been disclosed in Microsoft's Azure App Service that exposed the source code of customer applications written in Java, Node, PHP, Python and Ruby for at least four years, starting in September 2017.
Read the article ↗
Researchers discover new coexistence attacks on Wi-Fi and Bluetooth chips
Cybersecurity researchers have demonstrated a new attack technique that uses a device's Bluetooth component to extract network passwords directly and manipulate traffic on a Wi-Fi chip.
Read the article ↗
New Windows zero-day affects every Windows version, including Windows 11 and Windows Server 2022
The original vulnerability allowed a user with a limited-privilege account to escalate privileges and delete specific files on a system. This new vulnerability, however, appears more serious.
Read the article ↗