The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure.
Image: Alex Motoc McDonald’s, the largest fast-food chain globally, has disclosed a data breach after hackers breached its systems and stole information belonging to customers and employees from the US, South Korea, and Taiwan. As the world’s global foodservice retailer, McDonald’s serves almost hundreds of millions of customers every day in more than 39,000 locations…
Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management Colonial Pipeline Attack Used DarkSide Malware Doug Olenick (DougOlenick) • May 14, 2021 DarkSide ransomware was used in the attack against Colonial Pipeline Co. The gang behind DarkSide ransomware, which U.S. authorities say was used in the attack against Colonial…
The Australian Cyber Security Centre (ACSC), Cybersecurity and Infrastructure Security Agency (CISA), United Kingdom’s National Cyber Security Centre (NCSC) and Federal Bureau of Investigation (FBI) have released a joint cybersecurity advisory, highlighting the top Common Vulnerabilities and Exposures (CVEs) routinely exploited by cyber actors in 2020 and those vulnerabilities being widely exploited thus far in 2021. Cyber actors…
CVE-2021-1522
Some experts said the timing of attack, on the Friday before a US holiday long weekend, was aimed at spreading it as quickly as possible while employees were away from the job. Loading “What we are seeing now in terms of victims is likely just the tip of the iceberg,” said Adam Meyers, senior vice…
WikiLeaks-style group Distributed Denial of Secrets has revealed what it calls “GabLeaks”: a collection of more than 70 gigabytes of data from social media platform Gab, representing more than 40 million posts. Less well-known than Parler, which recently made the headlines as it was taken offline, Gab is a so-called “free speech” platform, known for…
