CyberNews A Critical Vulnerability in N-central Has Been Exploited by Attackers, Putting Thousands of Managed Systems at Risk N-able has released a hotfix for its N-central platform after reports emerged that attackers have successfully exploited a critical vulnerability to gain unauthorized access to thousands of managed systems. The vulnerability, which affects various versions of the platform, … Read more
A Critical Zero-Day Vulnerability in Metabase Exposes Admin Access Without Authentication, Leaving Many Organizations Vulnerable A newly discovered zero-day vulnerability in the popular data analytics platform Metabase has been exploited in the wild, allowing attackers to gain administrative access without requiring any authentication credentials. This critical flaw affects numerous organizations worldwide that rely on Metabase … Read more
Cybersecurity researchers have discovered a new class of attacks that can bypass webmail defenses and steal sensitive credentials, including passwords and tokens. The attacks, which exploit vulnerabilities in CSS (Cascading Style Sheets) code, allow hackers to break through even the most secure email accounts. The impact of these attacks is significant, with reports suggesting that … Read more
A Serious Vulnerability in Atlassian Rovo Exposes Jira and Confluence Data to Attackers Atlassian’s Rovo service has been found vulnerable to a clever attack that tricks it into sending sensitive data from its customers’ Jira and Confluence platforms to malicious actors. This breach of trust highlights the importance of vigilance in defending against sophisticated cyber … Read more
Cybersecurity experts have long known that Linux systems can be notoriously difficult to track due to their sparse logging capabilities. However, one area where this lack of visibility has been particularly problematic is in shell activity logs. Most shells, including Bash and others, only record a limited history of commands in a flat file located … Read more
A major cyberattack has disrupted operations at North Carolina’s three key ports, leaving behind a trail of uncertainty and concern for the region’s critical infrastructure. The US Coast Guard is leading the investigation into the breach, which affected all three port facilities – the Port of Wilmington, the Port of Morehead City, and the Charlotte … Read more
A Critical Flaw in Progress Kemp LoadMaster Exposes Thousands of Organizations to Cyber Threats The US Cybersecurity and Infrastructure Security Agency (CISA) has just added a new vulnerability to its Catalog of Known Exploits (KEV), highlighting a critical flaw in the Progress Kemp LoadMaster application delivery controller (ADC). The issue, which affects various versions of … Read more
Cybersecurity firm N-able has issued a critical hotfix for its N-central platform after attackers exploited vulnerabilities in the system, allowing them to reach and persist within managed networks. The issue is particularly concerning due to the widespread use of N-central among managed service providers (MSPs) and small-to-medium-sized businesses (SMBs). N-able’s N-central platform is a remote … Read more
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication, Leaving Thousands Vulnerable A critical zero-day vulnerability has been discovered in Metabase, a popular open-source business intelligence platform used by thousands of organizations worldwide. The flaw allows attackers to gain admin access without authentication, effectively bypassing all security measures and paving the way for devastating … Read more
A Cyberattack Disrupts North Carolina’s Ports, Sparking Concerns Over Critical Infrastructure The US Coast Guard is currently monitoring a cyberattack that has disrupted gate operations at three major ports in North Carolina. The breach, which affected the Port of Wilmington, the Port of Morehead City, and the Charlotte Inland Port, forced authorities to delay gate … Read more