In this post, we explore a powerful, yet widely unknown attack vector which has emerged in the last couple of years known as ‘Repo Jacking’. During our research, we discovered the enormous potential to compromise software components with tens of millions of downloads across the Terraform IaC (Infrastructure as Code) and Composer (PHP package registry) ecosystems. Despite its power, Repo Jacking remains under-researched and frequently misunderstood.

Healthcare and pharma companies are at the forefront of our most important need as humans: saving lives. To succeed, they require highly skilled staff members, medical equipment, drugs and resources. On top of these, there is another equally crucial component that will determine their ability to perform their jobs: their network. A secure, reliable and high performing network will ensure patient safety, data integrity and operational efficiency.

Local administrator rights provide users with unrestricted access to their machines, enabling them to install applications, modify system settings and perform other administrative tasks. While this level of freedom can enhance productivity and flexibility, it also poses significant threats to security, compliance and business continuity. Accordingly, best practices recommend strictly limiting local admin rights.

We made our WAF Machine Learning models 5.5x faster, reducing execution time by approximately 82%, from 1519 to 275 microseconds! Read on to find out how we achieved this remarkable improvement. WAF Attack Score is Cloudflare's machine learning (ML)-powered layer built on top of our Web Application Firewall (WAF). Its goal is to complement the WAF and detect attack bypasses that we haven't encountered before.

Think about all the vendors your company pays for. How many do you think there are? Out of those, how many do you think it actually uses? Spendesk examined this question in over 5,000 small- to medium-sized enterprises (SMEs) in the U.K., France, Germany, and Spain. The results were surprising. The study found that the average SME has 800 suppliers. That’s nine times the average SME headcount. What’s more, SMEs are only using about a quarter of them.

In this article we present a novel way to protect your container applications post-exploitation. This additional protection is called Seccomp-BPF.

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break! I’m sure some of you out are still dealing with the last week’s issue and never want to hear the word CrowdStrike again, well this might have helped.

Read also: A Scattered Spider member arrested in the UK, LockBit affiliates plead guilty, and more.

Cyberattackers are continuously seeking sophisticated new ways to crack passwords and get access to sensitive information such as personal user data, financial records, intellectual property, or corporate data. The stakes are high, and the challenge of keeping passwords secure has never been more critical. According to the 2024 Data Breach Investigations Report by Verizon, roughly 50% of data breaches involve stolen credentials, which highlights the need for robust password management practices.

As modern enterprise IT environments become more complex, the need for robust cybersecurity measures continues to grow. Because of this expanding complexity, DevSecOps functions are more common, requiring the integration of security into the application development lifecycle. Application Security Posture Management (ASPM) solutions offer a unified framework for securing the diverse application environment and merging security into the application development process.