Tag: #cybersecurity
Cisco’s NX-OS zero-day vulnerability (CVE-2024-20399) has been actively exploited by the Chinese state-sponsored threat actor known as Velvet Ant, highlighting the urgent need for cybersecurity professionals and network administrators to secure affected systems. In a forensic investigation led by Sygnia, it was discovered that Velvet Ant gained administrator-level credentials to access Cisco Nexus switches and […]
Ticketmaster recently confirmed a data breach that exposed the personal information of millions of customers worldwide. The attack targeted a cloud database hosted by Snowflake, a data warehousing platform, between April 2nd and May 18th, 2024. While Ticketmaster initially claimed the breach only impacted a limited number of users (around 1,000 according to their SEC […]
A critical GitLab vulnerability has been identified, tracked as CVE-2024-5655, affecting certain versions of GitLab Community and Enterprise Editions. This severe issue, with a CVSS score of 9.6 out of 10, enables attackers to run pipelines as any user, posing a significant security risk. It impacts all GitLab CE/EE versions from 15.8 through 16.11.4, 17.0.0 […]