Kevin BeaumontOracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS serviceBeing a provider of cloud SaaS (Software-as-a-service) solutions requires certain cybersecurity responsibilities — including being…6d ago66d ago6
Kevin BeaumontNo, there isn’t a world ending Apache Camel vulnerabilityPosts have been circulating publicly on the internet for several days about a “critical”, end of the world “zero day” in Apache Camel…Mar 92Mar 92
Kevin BeaumontUse one Virtual Machine to own them all — active exploitation of ESXicapeA chain of three zero days allow threat actors to escape a Virtual Machine.Mar 52Mar 52
Kevin Beaumont2022 zero day was used to raid Fortigate firewall configs. Somebody just released them.Back in 2022, Fortinet warned that somebody had a zero day vulnerability and was using it to exploit Fortigate firewalls…Jan 163Jan 163
Kevin BeaumontHandala attempts a supply chain hack via ReutOneDuring the week, Handala — a group painfully in love with Israel, tried a forward supply chain attack.Dec 27, 2024Dec 27, 2024
Kevin BeaumontBurning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPsYes, I’ve made a logo in crayon and named this FortiJump.Oct 22, 20243Oct 22, 20243
Kevin BeaumontEIW — ESET Israel Wiper — used in active attacks targeting Israeli orgsA look at wiping of Israeli orgs.Oct 17, 20241Oct 17, 20241
Kevin BeaumontHacker group Handala Hack Team claim battery explosions linked to Israeli battery company.Tracking Iran linked group claimsSep 19, 20242Sep 19, 20242
Kevin BeaumontCrowdStrike trying to use legal threats to suppress criticism and parody of global IT outageCrowdStrike attempts to hush up customers.Aug 5, 20243Aug 5, 20243
Kevin BeaumontMicrosoft need to be transparent about customer impacting DDoS attacksMicrosoft are hiding another customer impacting DDoS attack.Jul 30, 2024Jul 30, 2024