Topic: cloud misconfigurations
-
Azure AD Credentials Leaked in Public App Settings
A critical vulnerability in Azure Active Directory was discovered, where credentials were exposed in public configuration files, allowing potential exploitation. Attackers could use these credentials to impersonate trusted applications, gaining unauthorized access to sensitive data and systems wi...
Read More » -
Rising Cyber-Attacks Target PHP Servers and IoT Devices
A surge in cyber-attacks is targeting PHP servers, IoT devices, and cloud gateways, driven by botnets like Mirai exploiting known vulnerabilities and misconfigurations to expand their reach. Specific vulnerabilities under active exploitation include CVE-2022-47945 in ThinkPHP, CVE-2021-3129 in La...
Read More »
