A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application.
“The vulnerability is achieved through CSRF (cross-site request forgery) on the ubiquitous SCM service Kudu,” Ermetic researcher Liv Matan said in a report shared with The Hacker News. “By
Related Post
- November 14, 2024
Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting
Multiple threat actors have been found taking advantage of an attack technique called Sitting Ducks to hijack legitimate domains for
- November 14, 2024
ShrinkLocker ransomware: what you need to know
What is ShrinkLocker? ShrinkLocker is a family of ransomware that encrypts an organisation’s data and demands a ransom payment in
- November 14, 2024
Google Warns of Rising Cloaking Scams, AI-Driven Fraud,
Google has revealed that bad actors are leveraging techniques like landing page cloaking to conduct scams by impersonating legitimate sites.
- November 14, 2024
5 BCDR Oversights That Leave You Exposed to
Ransomware isn’t just a buzzword; it’s one of the most dreaded challenges businesses face in this increasingly digitized world. Ransomware