New ‘ALBeast’ Vulnerability Exposes Weakness in AWS Application Load Balancer https://firewall.firm.in/wp-content/uploads/2024/08/aws.gif Aug 22, 2024Ravie LakshmananCloud Security / Application Security As many as 15,000 applications using Amazon Web Services’ (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configuration-based issue that could expose them to sidestep access controls and compromise applications. That’s according to findings from Israeli cybersecurity ...
Read More »Vulnerabilities & Exploits
‘Obamacare’: Why and how this may be the biggest password leak ever – ET CISO
‘Obamacare’: Why and how this may be the biggest password leak ever – ET CISO https://etimg.etb2bimg.com/thumb/msid-111592680,imgsize-117696,width-1200,height=765,overlay-etciso/data-breaches/obamacare-why-and-how-this-may-be-the-biggest-password-leak-ever.jpg Security researchers from Cybernews have reportedly discovered the RockYou2024 database on BreachForums containing an astounding 9,948,575,739 unique passwords. It is claimed to be the biggest collection of stolen and leaked credentials ever seen on the BreachForums criminal underground forum, reports Forbes. Hacker named ObamaCare ...
Read More »Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control
Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control https://firewall.firm.in/wp-content/uploads/2024/08/cisco.png Aug 22, 2024Ravie LakshmananNetwork Security / Zero-Day Details have emerged about a China-nexus threat group’s exploitation of a recently disclosed, now-patched security flaw in Cisco switches as a zero-day to seize control of the appliance and evade detection. The activity, attributed to Velvet Ant, was observed early this ...
Read More »HealthEquity data breach exposes protected health information – ET CISO
HealthEquity data breach exposes protected health information – ET CISO https://etimg.etb2bimg.com/thumb/msid-111594116,imgsize-41420,width-1200,height=765,overlay-etciso/data-breaches/healthequity-data-breach-exposes-protected-health-information.jpg Healthcare fintech firm HealthEquity has disclosed a data breach following the compromise of a partner’s account, which was used to infiltrate the company’s systems and steal protected health information. The breach was identified after the company detected “anomalous behavior” from a partner’s personal device, prompting an investigation. The investigation ...
Read More »Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk
Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk https://firewall.firm.in/wp-content/uploads/2024/08/solarwinds.png Aug 22, 2024Ravie LakshmananVulnerability / Network Security SolarWinds has issued patches to address a new security flaw in its Web Help Desk (WHD) software that could allow remote unauthenticated users to gain unauthorized access to susceptible instances. “The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential ...
Read More »Personal data of nearly 8 million Angel One customers leaked online – ET CISO
Personal data of nearly 8 million Angel One customers leaked online – ET CISO https://etimg.etb2bimg.com/thumb/msid-111613595,imgsize-2403626,width-1200,height=765,overlay-etciso/data-breaches/personal-data-of-nearly-8-million-angel-one-customers-leaked-online.jpg AI generated image In a major breach of user data, around 7.9 million personally identifiable information (PII) data belonging to the customers of Mumbai-based stock broking firm Angel One, was released in an online hacker portal on Tuesday. Details like names, addresses, contact numbers and ...
Read More »Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide
Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide https://firewall.firm.in/wp-content/uploads/2024/08/rfid.png Aug 22, 2024Ravie LakshmananHardware Security / Supply Chain Attack Cybersecurity researchers have uncovered a hardware backdoor within a particular model of MIFARE Classic contactless cards that could allow authentication with an unknown key and open hotel rooms and office doors. The attacks have been demonstrated against FM11RF08S, ...
Read More »Australian cyber security agency accuses China-backed hacker group of stealing user data – ET CISO
Australian cyber security agency accuses China-backed hacker group of stealing user data – ET CISO https://etimg.etb2bimg.com/thumb/msid-111639830,imgsize-7046,width-1200,height=765,overlay-etciso/data-breaches/australian-cyber-security-agency-accuses-china-backed-hacker-group-of-stealing-user-data.jpg Australian cyber security agency accuses China-backed hacker group of stealing user data Cybersecurity firms backed by the Chinese authorities have been accused of stealing passwords and usernames from unnamed Australian networks in 2022, the Australian Cyber Security Centre (ACSC) reported on Tuesday. The investigation ...
Read More »Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data
Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data https://firewall.firm.in/wp-content/uploads/2024/08/ms.png Aug 21, 2024Ravie LakshmananSoftware Security / Vulnerability Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft’s Copilot Studio that could be exploited to access sensitive information. Tracked as CVE-2024-38206 (CVSS score: 8.5), the vulnerability has been described as an information disclosure bug stemming from a server-side request forgery (SSRF) ...
Read More »Angel One’s data breach dates back to April 2023, company clarifies – ET CISO
Angel One’s data breach dates back to April 2023, company clarifies – ET CISO https://etimg.etb2bimg.com/thumb/msid-111640226,imgsize-9956,width-1200,height=765,overlay-etciso/data-breaches/angel-ones-data-breach-dates-back-to-april-2023-company-clarifies.jpg (Representative Image) Angel One has denied any fresh data breach and has assured its customers of enhanced protection measures employed by the company. In a clarification issued on Wednesday, the domestic brokerage said that a reported data breach dates back to April 2023 and was ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











