-
Our favorite talks from fwd:cloudsec 2025
Our favorite talks from fwd:cloudsec 2025 In June 2025, the cloud security community converged on Denver, Colorado, for fwd:cloudsec North America 2025, and Red Canary was thrilled to be a sponsor! Hundreds of passionate cloud security practi … Read more Published Date: Jul 30, 2025 (3 hours, 7 minutes ago) Vulnerabilities has been mentioned in this article.…
-
Critical SonicWall SSL VPN Vulnerability Let Attackers Trigger DoS Attack on Firewalls
Critical SonicWall SSL VPN Vulnerability Let Attackers Trigger DoS Attack on Firewalls A critical vulnerability in SonicWall Gen7 firewall products could allow remote unauthenticated attackers to cause service disruptions through denial-of-service (DoS) attacks. The format string vulner … Read more Published Date: Jul 30, 2025 (3 hours, 44 minutes ago) Vulnerabilities has been mentioned in this article.…
-
Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits
Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits Jul 30, 2025Ravie LakshmananFirmware Security / Vulnerability Cybersecurity researchers have disclosed now-patched critical security flaws in the firmware of Dahua smart cameras that, if left unaddr … Read more Published Date: Jul 30, 2025 (3 hours, 49 minutes ago) Vulnerabilities has been mentioned in…
-
WordPress Theme RCE Vulnerability Actively Exploited to Take Full Site Control
WordPress Theme RCE Vulnerability Actively Exploited to Take Full Site Control A critical remote code execution (RCE) vulnerability in the popular “Alone” WordPress theme is being actively exploited by attackers to gain complete control of vulnerable websites. The vulnerability, … Read more Published Date: Jul 30, 2025 (3 hours, 56 minutes ago) Vulnerabilities has been mentioned in…
-
CrowdStrike Detects and Blocks Initial SharePoint Zero-Day Exploitation
CrowdStrike Detects and Blocks Initial SharePoint Zero-Day Exploitation Beginning on July 18, 2025, at approximately 0700 UTC, CrowdStrike Falcon® Complete Next-Gen MDR and CrowdStrike Falcon® Adversary OverWatch™ identified a wave of Microsoft SharePoint exploitation att … Read more Published Date: Jul 30, 2025 (4 hours, 11 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-53771 CVE-2025-53770…
-
Preventing Container Escape Attempts with Falcon Cloud Security’s Enhanced Runtime Capabilities
Preventing Container Escape Attempts with Falcon Cloud Security’s Enhanced Runtime Capabilities Container escape represents one of the most significant security threats in modern cloud computing environments. This allows attackers to break free from container isolation mechanisms, potentially le … Read more Published Date: Jul 30, 2025 (4 hours, 11 minutes ago) Vulnerabilities has been mentioned in this…
-
CrowdStrike Falcon Prevents Supply Chain Attack Involving Compromised NPM Packages
CrowdStrike Falcon Prevents Supply Chain Attack Involving Compromised NPM Packages Recently, five popular NPM (Node Package Manager) packages were compromised and modified to deliver a malicious DLL, dubbed “Scavenger”. The malware pushed via these compromised NPM packages executes … Read more Published Date: Jul 30, 2025 (4 hours, 11 minutes ago) Vulnerabilities has been mentioned in this…
-
Perfect Acquisition Part 5: Perfect APFS Acquisition
Welcome to Part 5 of the Perfect Acquisition series! In case you missed the previous parts, please check them out for background information. This section provides a comprehensive guide to performing the Perfect APFS Acquisition procedure. Perfect Acquisition Part 1: Introduction Perfect Acquisition Part 2: iOS Background Perfect Acquisition Part 3: Perfect HFS Acquisition Perfect…
-
Issues Affecting Forensic Disk Imaging
We previously tested disk imaging speeds using high-performance storage devices. But raw speed is only part of the equation. Even under ideal conditions, getting a fully correct and complete image can be tricky. And achieving peak speed consistently is even harder – many factors can slow things down, and sometimes even corrupt the results. In…
-
AI-Driven Password Recovery: Myth or Reality?
Artificial intelligence is everywhere – from phones that guess your next move to fridges that shop for you. It’s only natural to ask whether AI can help in a more serious domain: digital forensics, specifically password cracking. The idea sounds promising: use large language models (LLMs) to produce rules and templates for guessing highly probable…