Browsing tag
Three new security vulnerabilities have been discovered in Azure HDInsight’s Apache Hadoop, Kafka, and Spark services that could be exploited to achieve privilege escalation and a regular expression denial-of-service (ReDoS) condition. “The new vulnerabilities affect any authenticated user of Azure HDInsight services such as Apache Ambari and Apache Oozie,” Orca security researcher Lidor Ben Shitrit […]
A 29-year-old Ukrainian national has been arrested in connection with running a “sophisticated cryptojacking scheme,” netting them over $2 million (€1.8 million) in illicit profits. The person, described as the “mastermind” behind the operation, was apprehended in Mykolaiv, Ukraine, on January 9 by the National Police of Ukraine with support from Europol and an unnamed […]
Google is warning of multiple threat actors sharing a public proof-of-concept (PoC) exploit that leverages its Calendar service to host command-and-control (C2) infrastructure. The tool, called Google Calendar RAT (GCR), employs Google Calendar Events for C2 using a Gmail account. It was first published to GitHub in June 2023. “The script creates a ‘Covert Channel’ […]
If you deal with a large number of files on a daily basis but run out of storage space to store and manage them, a reliable cloud storage service is your answer. You can easily store your files and folders in cloud storage and access them whenever you like. Moreover, using cloud storage is also […]
As the cloud-service industry’s competition heats up, Google is enhancing its current web services with Advanced Protection, a new way for the search giant to harden its infrastructure from online threats. Google cloud is facing an uphill competition against Amazon, Microsoft and other smaller players in the cloud-storage/cloud-computing space, and the company’s drive towards security […]