Information Security

The recent security disclosure from Microsoft has revealed a critical vulnerability within Active Directory Certificate Services (AD CS), specifically tagged as CVE-2024-49019. This Elevation of Privilege (EoP) flaw poses significant risks to enterprises, potentially allowing attackers to gain domain administrator privileges if successfully exploited. Enterprises that rely heavily on AD CS for managing digital certificates are particularly vulnerable, especially because

The Amazon MOVEit leaker, who has made waves in the cybersecurity world, claims to be an ethical hacker with the goal of exposing vulnerabilities to improve security rather than causing harm. This individual has managed to breach the MOVEit file transfer service, a tool used by prominent companies like Amazon, and has leaked sensitive information, raising significant concerns about data

The cybersecurity landscape is constantly evolving, with new threats emerging and existing vulnerabilities being exploited. Recent incidents have highlighted the challenges faced by organizations in securing their digital environments. This article delves into Fortinet’s incomplete patch for the FortiJump vulnerability, significant data breaches, and the rising cyber risks in various sectors. Fortinet’s Inadequate FortiJump Patch WatchTowr’s Findings Researchers from WatchTowr