Cyber Defense Advisors

Month: October 2023

New Critical Zero-Day Vulnerability Affects Web UI of Cisco IOS XE Software & Allows Attackers to Compromise Routers

The number of devices exposing the web UI on the internet, a timeline and technical details about this malicious activity, and tips for mitigating this zero-day threat are featured.

Cyber News, Cyber Threat Trends
  • by
  • October 18, 2023

HasMySecretLeaked finds exposed secrets in the GitHub repository

Exposing hard-coded credentials and sensitive secrets through public code repositories has been a major security risk for organizations for years, with over 10 million new instances of credential leaks detected on GitHub alone in 2022. A new free service called HasMySecretLeaked now allows organizations to securely and privately check if any of their secrets are […]

Cyber News, Cyber Threat Trends
  • by
  • October 18, 2023

D-Link Confirms Data Breach: Employee Falls Victim to Phishing Attack

Taiwanese networking equipment manufacturer D-Link has confirmed a data breach that led to the exposure of what it said is “low-sensitivity and semi-public information.” “The data was confirmed not from the cloud but likely originated from an old D-View 6 system, which reached its end of life as early as 2015,” the company said. “The data […]

Cyber News, Cyber Threat Trends
  • by
  • October 18, 2023

Init Script on an EC2 Instance to Assume a Role With MFA and Pass it to a Container

ACM.345 Troubleshooting networking and modifying our assume role script to work as EC2 User Data Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • October 18, 2023

Medium, please align story recommendations with publications

If I have two separate publications — recommend the stories from the publication the user is visiting Continue reading on Bugs That Bite »

Cyber News, Cyber Threat Trends
  • by
  • October 18, 2023

New Admin Takeover Vulnerability Exposed in Synology’s DiskStation Manager

A medium-severity flaw has been discovered in Synology’s DiskStation Manager (DSM) that could be exploited to decipher an administrator’s password and remotely hijack the account. “Under some rare conditions, an attacker could leak enough information to restore the seed of the pseudorandom number generator (PRNG), reconstruct the admin password, and remotely take over the admin […]

Cyber News, Cyber Threat Trends

New Critical Zero-Day Vulnerability Affects Web UI of Cisco IOS XE Software & Allows Attackers to Compromise Routers

The number of devices exposing the web UI on the internet, a timeline and technical details about this malicious activity, and tips for mitigating this zero-day threat are featured.

Cyber News, Cyber Threat Trends

New Critical Zero-Day Vulnerability Affects Web UI of Cisco IOS XE Software & Allows Attackers to Compromise Routers

The number of devices exposing the web UI on the internet, a timeline and technical details about this malicious activity, and tips for mitigating this zero-day threat are featured.

Cyber News, Cyber Threat Trends

New Critical Zero-Day Vulnerability Affects Web UI of Cisco IOS XE Software & Allows Attackers to Compromise Routers

The number of devices exposing the web UI on the internet, a timeline and technical details about this malicious activity, and tips for mitigating this zero-day threat are featured.

Cyber News, Cyber Threat Trends