Threat actors exploring AWS environments and API calls could potentially go undetected. Amazon Web Services (AWS) has addressed a bypass vulnerability that could allow attackers to evade CloudTrail API monitoring. In a blog entry on January 17, Nick Frichette, senior researcher at Datadog Security Labs, addressed this important vulnerability affecting the CloudTrail event logging service,…

Threat actors exploring AWS environments and API calls may operate undetected Amazon Web Services (AWS) has addressed a critical bypass vulnerability that could have been exploited by attackers to evade monitoring through the CloudTrail API. In a blog post published on January 17 by Datadog Security Labs, senior researcher Nick Frichette discussed how the vulnerability…

Malicious actors exploring AWS environments and API interactions may operate without detection. Amazon Web Services (AWS) has addressed a vulnerability that could potentially allow attackers to evade CloudTrail API monitoring. In a January 17 blog entry, Datadog Security Labs senior researcher Nick Frichette noted that this vulnerability affects the CloudTrail event logging service, which serves…

Accusations Against Password Vault Provider Over Encryption Issues UPDATED Bitwarden, a password vault provider, has addressed renewed concerns regarding its encryption methods for safeguarding users’ secret keys by improving the security configuration of its mechanisms. This concern revolves around the number of PBKDF2 hash iterations utilized to generate the decryption key for a user’s password…

Concerns Raised Over Password Vault Vendor’s Encryption Practices UPDATED: Password vault provider Bitwarden has addressed renewed concerns surrounding its encryption strategy for safeguarding users’ secret keys by strengthening its default security configurations. The primary concern focuses on the number of PBKDF2 hash iterations used for generating a decryption key for a user’s password vault. According…

Pre- and post-authentication vulnerabilities pose significant risks A trio of authentication bypass vulnerabilities have been identified and resolved in the widely-used enterprise analytics platform, Yellowfin BI. These vulnerabilities originate from the use of hardcoded keys, exposing the platform to potential exploitation. Initial research conducted by security experts from Assetnote revealed pre-authentication vulnerabilities, which later led…

Numerous applications are exposed to brute-force attacks, and many more may also be at risk. UPDATED: Inadequate integration of the Ransack library within Ruby on Rails (RoR) applications poses a risk of data theft from backend databases, as highlighted by security firm Positive Security in a recent report. Ransack facilitates developers in incorporating object-based search…

Charlie Osborne 26 January 2023 at 13:52 UTC Updated: 26 January 2023 at 13:55 UTC Over 61,000 vulnerabilities resolved and still counting Trellix has successfully patched more than 61,000 projects impacted by a critical vulnerability in Python, utilizing an innovative automated system to streamline the remediation process significantly. Recently, researchers at the Trellix Advanced Research…

Charlie Osborne26 January 2023 at 13:52 UTC Updated: 26 January 2023 at 13:55 UTC Trellix has successfully patched over 61,000 vulnerabilities in open source projects, utilizing an automated tool to expedite the process against a significant Python bug. A year ago, the Trellix Advanced Research Center identified a long-standing vulnerability within Python’s tarfile module, which…

Numerous applications are vulnerable to brute-force attacks, and many more may also be at risk. UPDATED Security firm Positive Security has issued a warning about poor integration of the Ransack library within Ruby on Rails (RoR) applications, which could enable attackers to extract sensitive information from backend databases. Ransack provides developers with the ability to…