security misconfiguration

From Dark Reading – Experts Optimistic about Secure by Design Progress

Secure by Design is an important step to reduce the number of vulnerabilities present originally, but is it progressing fast enough? Security experts Chris Wysopal and Jason Healey say things…

shaikh Saqib April 8, 2025

News

From Cyber Security News – Hackers Leveraging Compromised Email Server To Send Fraudulent Emails

In a sophisticated business email compromise (BEC) attack recently uncovered by Trend Micro Managed XDR team, threat actors exploited a compromised third-party email server to conduct fraudulent financial transactions between…

shaikh Saqib March 10, 2025

News

From Cyber Security News – New Vulnerability in Substack let Attackers Take Over Subdomains

A newly disclosed edge case in Substack’s custom domain implementation allows threat actors to hijack inactive subdomains, potentially enabling content spoofing, phishing campaigns, and brand impersonation. The researcher identified 1,426…

shaikh Saqib March 3, 2025

News

From Cyber Security News – Nagios XI Vulnerability Allows Unauthenticated Users to View Other User Details & Email

A significant security vulnerability (CVE-2024-54961) has been identified in Nagios XI 2024R1.2.2, enabling unauthenticated attackers to retrieve sensitive user information, including usernames and email addresses. This flaw, classified as an…

shaikh Saqib February 24, 2025