Day: October 19, 2022

Breaches Cloud

Microsoft leaked business transaction data on more than 65K prospective customers via misconfigured Azure storage bucket, threat intel vendor claims

Misconfigured and insecure cloud storage buckets—particularly AWS S3 buckets—pose a major data leak risk for organizations. In recent years hundreds of companies have had sensitive data exposed via this vector [292 words]. What: Threat intelligence firm SOCRadar on Wednesday claimed that its researchers had discovered sensitive business transaction data belonging to over 65,000 entities from […]

Read More
Vulnerabilities

Vuln in GitHub Enterprise server could enable RCE on SVNBridge

Vulnerability has not been assigned a severity rating yet [242 words]. What:  A deserialization of untrusted data vulnerability (CVE-2022-23734 )exists in multiple GitHub Enterprise Server versions that could potentially let a remote attacker execute arbitrary code on the SVNBridge open-source extension for Microsoft Azure DevOps Server. To exploit the flaw, an attacker would need to have access […]

Read More