@nish

CISSP - Security, Network, Cloud & Infrastructure. Advisor | Strategist | Architect - #CyberSecurity #InfoSec #Cloud #Network #Linux #Tech

 VIEWS ARE MY OWN.
nish.com
Joined February 2008
  • Tweets1.3K
  • Following301
  • Followers311
141Media
One of the biggest yet underestimated risk out there is Cyber Threats. #CyberSecurity #InfoSec #ITSecurity
1
7
13
A hacker has leaked data stolen recently from a Cisco DevHub instance, but claims it’s only a fraction of the total amount of files that was taken. securityweek.com/hacker-leak… #CyberSecurity #infosec

Hacker Leaks Cisco Data

IntelBroker has leaked 2.9 Gb of data stolen recently from a Cisco DevHub instance, but claims it’s only a fraction of the total. 

securityweek.com
1
447
US doughnut chain Krispy Kreme suffered a cyberattack in November that impacted portions of its business operations, including placing online orders. bleepingcomputer.com/news/se… #cybersecurity #infosec

Krispy Kreme cyberattack impacts online orders and operations

US doughnut chain Krispy Kreme suffered a cyberattack in November that impacted portions of its business operations, including placing online orders.

bleepingcomputer.com
202
London hospitals declare critical incident after cyber attack. A “major IT incident” affected the pathology departments of King’s College Hospital and of Guy’s and St Thomas’ NHS Foundation Trust. ft.com/content/64ac2bd3-7bff… #CyberSecurity #CyberAttack #NHS

London hospitals declare critical incident after cyber attack

Ransomware attempt on provider forces cancellations and delays blood tests and transfusion deliveries

ft.com
1
330
Zscaler calls investigators in amid breach speculation techmonitor.ai/technology/cy… #CyberSecurity #InfoSec #Zscaler #Breach
1
302
ArcaneDoor hackers exploit Cisco zero-days to breach government networks. #CyberSecurity #Cisco #ZeroDay #ASA #FTD bleepingcomputer.com/news/se…

ArcaneDoor hackers exploit Cisco zero-days to breach govt networks

​Cisco warned today that a state-backed hacking group has been exploiting two zero-day vulnerabilities in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) firewalls since November...

bleepingcomputer.com
182
🚨 #SecurityAlert 🚨 Arbitrary Authentication Relay and Session Hijack vulnerabilities discovered in deprecated VMware Enhanced Authentication Plug-in (EAP). CVE-2024-22245 and CVE-2024-22250 identified. Stay secure! 🔒 #CyberSecurity #VMware #CVE2024 vmware.com/security/advisori…

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
1
155
AnyDesk says hackers breached its production servers, reset passwords bleepingcomputer.com/news/se… #CyberSecurity #Infosec #AnyDesk #Breach

AnyDesk says hackers breached its production servers, reset passwords

AnyDesk confirmed today that it suffered a recent cyberattack that allowed hackers to gain access to the company's production systems. BleepingComputer has learned that source code and private code...

bleepingcomputer.com
173
A critical DOM-Based XSS vulnerability discovered in Palo Alto Networks PAN-OS software (CVE-2023-6790). 🛡️ A remote attacker could execute using a specially crafted link on the PAN-OS web interface. #CyberSecurity #PaloAltoNetworks #Vulnerability security.paloaltonetworks.co…

CVE-2023-6790 PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when...

security.paloaltonetworks.com
1
190
🚨 Security Alert 🚨 An authentication bypass vulnerability discovered in VMware Cloud Director Appliance with a CVE score of 9.8. CVE-2023-34060 for details. Stay vigilant, Stay secure. #Cybersecurity #VMware #infosecurity vmware.com/security/advisori…

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
171
🔐 A critical authentication bypass vulnerability in VMware Cloud Director Appliance has been identified via CVE-2023-34060 value 9.8. It’s time to patch to the latest updates to stay secure. #Cybersecurity #Vulnerability #vmware vmware.com/security/advisori…

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
145
Sumo Logic, a leading player in cloud-native big data and security, has revealed a potential breach linked to compromised AWS credential. #SumoLogic #SecurityBreach #AWS #Cybersecurity 🔒💻🔍" bleepingcomputer.com/news/se…

Sumo Logic discloses security breach, advises API key resets

Security and data analytics company Sumo Logic disclosed a security breach after discovering that its AWS (Amazon Web Services) account was compromised last week.

bleepingcomputer.com
119
vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. Critical: CVE-2023-34048 and CVE-2023-34056 vmware.com/security/advisori… #cybersecurity #infosec #vulnerability #vmware #vCenter

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
253
Multiple security vulnerabilities in VMware Workstation and Fusion were reported to VMware. It is tracked under CVE-2023-34044, CVE-2023-34045, CVE-2023-34046 vmware.com/security/advisori… #CyberSecurity #Infosec #VMWare #Fusion #Workstation #Vulnerability

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
116
Multiple vulnerabilities in VMware Aria Operations for Logs were privately reported to VMware. It is tracked under CVE-2023-34051 vmware.com/security/advisori… #CyberSecurity #Infosec #VMWare #Vulnerability

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
98
There have been indications that a built-in capability within ServiceNow could potentially be leveraged to extract data from records as an unauthenticated user. #CyberSecurity #infosec #Privacy #DataPrivacy #Regulations #GDPR #ServiceNow enumerated.ie/index/servicen…

Data Exposure and ServiceNow: The Elephant in the ITSM Room — Enumerated

This research is written and discovered by Aaron Costello (Twitter @ConspiracyProof). Daniel Miessler has had absolutely no part in the research nor this article. His sole link to the research is...

enumerated.ie
117
Fortinet VPN bug tops CISA’s list of most exploited vulnerabilities in 2022 No Software is bullet proof, patch it or manage the risk accordingly. #CyberSecurity #infosec #bugs #vulnerability #CISA #Exploit #Fortinet therecord.media/fortinet-vpn… via @TheRecord_Media

Fortinet VPN bug tops CISA’s list of most exploited vulnerabilities in 2022

A joint advisory from the Five Eyes nations warns that malicious cyber actors are exploiting older software vulnerabilities more frequently than recently disclosed ones.

therecord.media
159
OverlayFS: Easy to exploit local privilege escalation vulnerabilities in Ubuntu Linux affecting 40% of Ubuntu users. #CyberSecurity #infosec #Ubuntu #vulnerability #linux #wiz #OverlayFS wiz.io/blog/ubuntu-overlayfs…

GameOverlay Vulnerability Impacts 40% of Ubuntu Workloads | Wiz Blog

Wiz Research discovers CVE-2023-2640 & CVE-2023-32629, 2 privilege escalation vulnerabilities in Ubuntu's OverlayFS module impacting 40% of cloud workloads.

wiz.io
114
Azure AD is being renamed to Microsoft Entra ID devblogs.microsoft.com/ident… #Microsoft #Azure #Cloud #AzureAD

Azure AD is being renamed to Microsoft Entra ID | Microsoft Entra Identity Platform

Azure Active Directory (Azure AD) is being renamed in unification with the expanded Microsoft Entra identity and network access product family.

devblogs.microsoft.com
64
Disadvantages of Single Cloud, SaaS, or IaaS Strategy nish.com/blog/disadvantages-… #Strategy #Cloud #SaaS #IaaS #Microsoft365 #SSO #Okta

Disadvantages of Single Cloud, SaaS, or IaaS Strategy

An overall look at the risks involved on depending solely on a single Cloud/SaaS/IaaS provider and safeguarding your digital assets.

nish.com
1
113
Microsoft Teams vulnerability allows attackers to deliver malware to employees. #cybersecurity #infosec #Microsoft #Teams #vulnerability #Malware helpnetsecurity.com/2023/06/…

Microsoft Teams vulnerability allows attackers to deliver malware to employees - Help Net Security

Security researchers have found a bug that could allow attackers to deliver malware directly into employees' Microsoft Teams inbox.

helpnetsecurity.com
86
Load more