Security Boulevard https://securityboulevard.com/ The Home of the Security Bloggers Network Sun, 31 Mar 2024 15:09:18 +0000 en-US hourly 1 https://wordpress.org/?v=6.4.3 https://securityboulevard.com/wp-content/uploads/2021/10/android-chrome-256x256-1-32x32.png Security Boulevard https://securityboulevard.com/ 32 32 133346385 Bombshell in SSH servers! What CVE-2024-3094 means for Kubernetes users https://securityboulevard.com/2024/03/bombshell-in-ssh-servers-what-cve-2024-3094-means-for-kubernetes-users/ https://securityboulevard.com/2024/03/bombshell-in-ssh-servers-what-cve-2024-3094-means-for-kubernetes-users/#respond Sun, 31 Mar 2024 15:09:18 +0000 https://www.armosec.io/?p=6122 On March 29, 2024, Red Hat disclosed CVE-2024-3094, scoring a critical CVSS rating of 10. Stemming from a

The post Bombshell in SSH servers! What CVE-2024-3094 means for Kubernetes users appeared first on ARMO.

The post Bombshell in SSH servers! What CVE-2024-3094 means for Kubernetes users appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/bombshell-in-ssh-servers-what-cve-2024-3094-means-for-kubernetes-users/feed/ 0 2013542 Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise https://securityboulevard.com/2024/03/critical-backdoor-found-in-xz-utils-cve-2024-3094-enables-ssh-compromise/ https://securityboulevard.com/2024/03/critical-backdoor-found-in-xz-utils-cve-2024-3094-enables-ssh-compromise/#respond Sun, 31 Mar 2024 11:04:37 +0000 http://securityboulevard.com/?guid=a83103c0ea2044b782b1b6c7a9876396 The Mend.io research team detected more than 100 malicious packages targeting the most popular machine learning (ML) libraries from the PyPi registry.

The post Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise appeared first on Mend.

The post Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/critical-backdoor-found-in-xz-utils-cve-2024-3094-enables-ssh-compromise/feed/ 0 2013532 Cybersecurity Tabletop Exercises: How Far Should You Go? https://securityboulevard.com/2024/03/cybersecurity-tabletop-exercises-how-far-should-you-go/ https://securityboulevard.com/2024/03/cybersecurity-tabletop-exercises-how-far-should-you-go/#respond Sun, 31 Mar 2024 09:07:32 +0000 http://securityboulevard.com/?guid=8768b82c3d9264b757c5198c9279d498 With global cyber threats and other international tensions growing, what scenarios should state and local governments consider when conducting exercises to test their people, processes and technology?  

The post Cybersecurity Tabletop Exercises: How Far Should You Go? appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/cybersecurity-tabletop-exercises-how-far-should-you-go/feed/ 0 2013530 An Accidental Discovery of a Backdoor Likely Prevented Thousands of Infections https://securityboulevard.com/2024/03/an-accidental-discovery-of-a-backdoor-likely-prevented-thousands-of-infections/ https://securityboulevard.com/2024/03/an-accidental-discovery-of-a-backdoor-likely-prevented-thousands-of-infections/#respond Sat, 30 Mar 2024 20:07:28 +0000 https://www.deepfactor.io/?p=5354 ... Read more »

The post An Accidental Discovery of a Backdoor Likely Prevented Thousands of Infections appeared first on Deepfactor.

The post An Accidental Discovery of a Backdoor Likely Prevented Thousands of Infections appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/an-accidental-discovery-of-a-backdoor-likely-prevented-thousands-of-infections/feed/ 0 2013523 What You Need to Know About the XZ Utils Backdoor https://securityboulevard.com/2024/03/what-you-need-to-know-about-the-xz-utils-backdoor/ https://securityboulevard.com/2024/03/what-you-need-to-know-about-the-xz-utils-backdoor/#respond Sat, 30 Mar 2024 18:30:45 +0000 https://www.legitsecurity.com/blog/what-you-need-to-know-about-the-xz-utils-backdoor What You Need to Know About the XZ Utils Backdoor

Understand how to respond to the announcement of the XZ Utils backdoor.

The post What You Need to Know About the XZ Utils Backdoor appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/what-you-need-to-know-about-the-xz-utils-backdoor/feed/ 0 2013525 Understanding and Mitigating the Fedora Rawhide Vulnerability (CVE-2024-3094) https://securityboulevard.com/2024/03/understanding-and-mitigating-the-fedora-rawhide-vulnerability-cve-2024-3094/ https://securityboulevard.com/2024/03/understanding-and-mitigating-the-fedora-rawhide-vulnerability-cve-2024-3094/#respond Sat, 30 Mar 2024 18:17:08 +0000 https://www.ox.security/?p=4889 CVE-2024-3094 is a reported supply chain compromise of the xz libraries. The resulting interference with sshd authentication could enable an attacker to gain unauthorized access to the system. Overview Malicious code was identified within the xz upstream tarballs, beginning with version 5.6.0. This malicious code is introduced through a sophisticated obfuscation technique during the liblzma […]

The post Understanding and Mitigating the Fedora Rawhide Vulnerability (CVE-2024-3094) appeared first on OX Security.

The post Understanding and Mitigating the Fedora Rawhide Vulnerability (CVE-2024-3094) appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/understanding-and-mitigating-the-fedora-rawhide-vulnerability-cve-2024-3094/feed/ 0 2013521 How did CVE-2024-27198 Lead to Critical Vulnerability in JetBrains? https://securityboulevard.com/2024/03/how-did-cve-2024-27198-lead-to-critical-vulnerability-in-jetbrains/ https://securityboulevard.com/2024/03/how-did-cve-2024-27198-lead-to-critical-vulnerability-in-jetbrains/#respond Sat, 30 Mar 2024 06:37:55 +0000 https://kratikal.com/blog/?p=10415 CVE-2024-27198 Lead to Server Takeover Vulnerabilities

The post How did CVE-2024-27198 Lead to Critical Vulnerability in JetBrains? appeared first on Kratikal Blogs.

The post How did CVE-2024-27198 Lead to Critical Vulnerability in JetBrains? appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/how-did-cve-2024-27198-lead-to-critical-vulnerability-in-jetbrains/feed/ 0 2013515 What Is Session Management & Tips to Do It Securely https://securityboulevard.com/2024/03/what-is-session-management-tips-to-do-it-securely/ https://securityboulevard.com/2024/03/what-is-session-management-tips-to-do-it-securely/#respond Sat, 30 Mar 2024 05:00:00 +0000 https://www.descope.com/learn/post/session-management An amazing post

The post What Is Session Management & Tips to Do It Securely appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/what-is-session-management-tips-to-do-it-securely/feed/ 0 2013527 Getting rid of a 20+ year old known vulnerability: It’s like a PSA for Runtime Security https://securityboulevard.com/2024/03/getting-rid-of-a-20-year-old-known-vulnerability-its-like-a-psa-for-runtime-security/ https://securityboulevard.com/2024/03/getting-rid-of-a-20-year-old-known-vulnerability-its-like-a-psa-for-runtime-security/#respond Fri, 29 Mar 2024 22:03:25 +0000 https://www.contrastsecurity.com/security-influencers/getting-rid-of-a-20-year-old-known-vulnerability-its-like-a-psa-for-runtime-security Getting rid of a 20+ year old known vulnerability: It’s like a PSA for Runtime Security

On Wednesday, March 27, CISA and the FBI issued a cry for help: We need to stamp out SQL injection vulnerabilities, and we need to do it yesterday, they said in a joint Secure by Design alert aimed at any and all software manufacturers that continue to develop products with this defect. 

The post Getting rid of a 20+ year old known vulnerability: It’s like a PSA for Runtime Security appeared first on Security Boulevard.

]]> https://securityboulevard.com/2024/03/getting-rid-of-a-20-year-old-known-vulnerability-its-like-a-psa-for-runtime-security/feed/ 0 2013481 ‘Darcula’ PhaaS Campaign Sinks Fangs into Victims https://securityboulevard.com/2024/03/darcula-phaas-campaign-sinks-fangs-into-victims/ Fri, 29 Mar 2024 18:55:00 +0000 https://securityboulevard.com/?p=2013455 phishing cybersecurity

A sprawling phishing-as-a-service (PhaaS) campaign that has been running since at least last summer is using more than 20,000 fake domains to target a wide range of organizations in more than 100 countries, illustrating the capabilities of an increasingly popular tool among threat actors. The unknown hackers are using a platform called “Darcula” (sic) that..

The post ‘Darcula’ PhaaS Campaign Sinks Fangs into Victims appeared first on Security Boulevard.

]]> 2013455