2020-08-10 00:00 UTC
Other
Other
S3 Crypto SDK vulnerabilities
No summary available
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,796 matching records.
AUTO-POLL // 2026-10-12 11:30 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P7 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 12
RANSOMWARE
P7
COOL // 11 ARTICLES
SUN
Oct 11
ACTIVE EXPLOITATION
P5
COOL // 6 ARTICLES
SAT
Oct 10
RANSOMWARE
P1
COOL // 11 ARTICLES
FRI
Oct 9
RANSOMWARE
P4
COOL // 67 ARTICLES
THU
Oct 8
RANSOMWARE
P3
COOL // 62 ARTICLES
WED
Oct 7
RANSOMWARE
P5
COOL // 86 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
2020-07-28 12:00 UTC
Government
Government
Decrypting diversity: Diversity and inclusion in cyber security report 2020
Joint report between the NCSC and KPMG UK is the first in a series to benchmark and track levels of diversity and inclusion in the cyber security industry.
P0
2020-07-27 00:00 UTC
Other
Other
CloudTrail S3 data events leak bucket Account ID
Using CloudTrail S3 data events, it was possible to determine the AWS account ID of any existing S3 bucket by calling any S3 API, getting denied, and looking at the value in the resource key in error message that showed up in CloudTrail.
P0
2020-07-23 12:00 UTC
Government
Government
The cyber threat to sports organisations
The NCSC report highlights the cyber threats faced by the sports sector and suggests how to stop or lessen their impact on organisations.
P0
2020-07-21 00:00 UTC
Security Journalism
Security Journalism
Huntress Service: External Recon | Huntress
Read about the value of Huntress' External Recon service, which highlights open ports and services that are exposed to the Internet.
P0
2020-07-14 12:00 UTC
Government
Government
Summary of the NCSC analysis of May 2020 US sanction
A summary of the NCSC’s analysis of the May 2020 US sanction which caused the NCSC to modify the scope of its security mitigation strategy for Huawei.
P0
2020-07-05 13:51 UTC
Other
Other
Digital forensics specialist’s bookshelf
Top 11 books on digital forensics, incident response, and malware analysis
P0
2020-07-01 00:00 UTC
Other
Other
XSS on EC2 web console
Display of EC2 tags had XSS
P0
2020-06-24 00:00 UTC
Security Journalism
Security Journalism
Huntress Service: Ransomware Canaries | Huntress
Read about the value of Huntress' Ransomware Canaries service, a mechanism to deliver faster detection of a ransomware incident.
P15
2020-06-22 00:00 UTC
Security Journalism
Security Journalism
Evolving the Hunt: Removing Obstacles to Innovation
At Huntress, our goal is not only to chase after changing threats but to remove obstacles that get in the way of new security innovation.
P0
2020-06-18 00:00 UTC
Security Journalism
Security Journalism
Hiding In Plain Sight | Huntress
There’s no end to the stealthy ways in which attackers develop and execute their tradecraft. In this case, it's as simple as hiding in plain sight.
P0
2020-06-15 00:00 UTC
Other
Other
GKE and EKS CAP_NET_RAW metadata service MITM root privilege escalation
An attacker with access to a hostNetwork=true container with CAP_NET_RAW capability can listen to all the traffic going through the host and inject arbitrary traffic, allowing to tamper with most unencrypted traffic (HTTP, DNS, DHCP, ...), and disrupt encrypted traffic. In GKE the host queries the metadata service at http://169[.]254.169.254 to get information, including the authorized SSH keys. By manipulating the metadata service responses and injecting our own SSH key, it is possible to gain…
P10
2020-06-12 00:00 UTC
Security Journalism
Security Journalism
The Impact of Data Breaches on Our Society | Huntress
How do we calculate the total impact of a data breach? Visit the Huntress Blog to learn more about how cyber security awareness training can help to mitigate risk.
P0
2020-05-29 13:54 UTC
Other
Other
P0
2020-05-21 00:00 UTC
Other
Other
RCE in Google Cloud Deployment Manager
An RCE in Google Cloud Deployment Manager could have allowed an attacker to make requests to internal Google services, authenticated as a privileged service account.
P15
2020-05-14 14:09 UTC
Other
Other
ATT&CKing ProLock Ransomware
The success of enterprise ransomware attacks has motivated more and more threat actors to join the game.
P15
2020-05-04 12:00 UTC
Government
Government
High level privacy and security design for NHS COVID-19 contact tracing app
NCSC technical paper about the privacy and security design of the NHS contact tracing app developed to help slow the spread of coronavirus.
P0
2020-04-30 14:12 UTC
Other
Other
P0
2020-04-28 14:27 UTC
Other
Other
Reconstructing User Activity for Forensics with FeatureUsage
Useful feature that can help forensic analysts and incident responders to reconstruct user activities.
P0
2020-04-23 00:00 UTC
Other
Other
GuardDuty detection bypass via cloudtrail
GuardDuty detected CloudTrail being outright disabled, but did not detect if an attacker with the necessary permissions filtered out all events from CloudTrail via PutEventSelectors, resulting in defenders having no logs to review. AWS fixed this issue by adding a GuardDuty detection that triggers if PutEventSelectors is used to disable all event types.
P0
2020-03-11 00:00 UTC
Other
Other
GCP Cloudshell Cross-Site WebSocket Hijacking (CSWSH)
Google Cloudshell leveraged websockets without validating that the origin matched the current instance host. An attacker could therefore host a CSWSH attack on a Cloudshell instance they own, disabling authentication via access to the underlying VM. They could then start the OAuth process with a spoofed host header, using phishing to get the target Cloud Shell user into following a redirection link, completing the OAuth process and ending in successful CSWSH, which would allow the attacker to h…
P0
2020-03-08 00:00 UTC
Other
Other
Google wide domain check bypass
A vulnerability in Google's common JavaScript library allowed bypassing domain validation checks across multiple Google products. By using a backslash character in URLs, an attacker could make the regex parser and browser disagree on the authority (domain) portion of a URL, allowing injection of arbitrary domains that pass whitelisting checks.
P0
2020-02-20 09:13 UTC
Other
Other
Chromium-based Microsoft Edge from a Forensic Point of View
Explore the forensic perspective of the Microsoft Edge Chromium-based version and its features, such as msedge_proxy, edge cache location, and more.
P0
2020-02-04 00:00 UTC
Security Journalism
Security Journalism
How One Criminal Tried to Sell an MSP on the Dark Web | Huntress
In a rare encounter, we found ourselves directly interacting with a cybercriminal that took us down a dark web rabbit hole.
P0
2020-01-30 00:00 UTC
Other
Other
Azure App Service RCE
A Vulnerability in App Service could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system, thereby escaping the sandbox. This vulnerability allowed cross-account access when using the Free/Shared tier.
P15
2020-01-28 12:00 UTC
Government
Government
Summary of NCSC’s security analysis for the UK telecoms sector
A summary of the NCSC’s security analysis for the UK telecoms sector
P0
2020-01-24 16:00 UTC
Security Journalism
Security Journalism
Validating the SolarWinds N-central 'Dumpster Diver' Vuln | Huntress
Read more about Huntress validating the SolarWinds N-central “Dumpster Diver” Vulnerability.
P0
2020-01-23 00:00 UTC
Other
Other
AWS uploaded sensitive data to public GitHub bucket
An AWS employee pushed sensitive data to a public github bucket, including customer information and credentials. Note: This issue is outside the scope of this database's usual criteria for inclusion, but has been kept for historic reasons, as it was included in the original CSP Security Mistakes dataset.
P0
2020-01-22 00:00 UTC
Security Journalism
Security Journalism
Validating the Bishop Fox Findings in ConnectWise Control | Huntress
The Huntress team validates eight vulnerabilities found in ConnectWise Control that ranged from low to high severity.
P0
2020-01-17 14:32 UTC
Other
Other
Hunting for Nextcloud Cloud Storage Forensic Artifacts on Endpoints
Forensic artifacts, which can be found during forensic examination of a Windows endpoint.
P0