Cyber Defense Advisors

Month: October 2023

  • by
  • October 27, 2023

Clone a CodeCommit Repository in a Lambda Function

ACM.353 This took way longer than it should have to figure out Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • October 27, 2023

SMBs Need to Balance Cybersecurity Needs and Resources

Small and midsize businesses face the same cyberattacks as enterprises, with fewer resources. Here’s how to protect a company that has leaner means.

Cyber News, Cyber Threat Trends
  • by
  • October 27, 2023

How Kopeechka, an Automated Social Media Accounts Creation Service, Can Facilitate Cybercrime

This report explores the Kopeechka service and gives a detailed technical analysis of the service’s features and capabilities and how it can help cybercriminals to achieve their goals.

Cyber News, Cyber Threat Trends
  • by
  • October 27, 2023

Creating a Base Container for Lambda Functions

ACM.354 A base container with shared code and the Lambda Runtime Interface Emulator for local and in-Lambda testing Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • October 27, 2023

AWS Data Breaches

What’s causing data breaches on AWS? Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • October 27, 2023

F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution

F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution. The issue, rooted in the configuration utility component, has been assigned the CVE identifier CVE-2023-46747, and carries a CVSS score of 9.8 out of a maximum of 10. “This vulnerability may allow an unauthenticated attacker with network […]

Cyber News, Cyber Threat Trends
  • by
  • October 27, 2023

Failure to verify OAuth tokens enables account takeover on websites

Researchers have found yet another OAuth implementation error on various websites that allow users to authenticate with their identities from third-party services such as Facebook or Google. Some sites fail to complete an important step in the OAuth authorization chain that involves validating for which app an access token was issued by the identity provider. […]

Cyber News, Cyber Threat Trends
  • by
  • October 27, 2023

Cybersecurity startups to watch in 2023

The problems cybersecurity startups attempt to solve are often a bit ahead of the mainstream. They can move faster than most established companies to fill gaps or emerging needs. Startups can often innovate faster because they are unfettered by an installed base. The downside, of course, is that startups often lack resources and maturity. It’s […]

Cyber News, Cyber Threat Trends