3 casos · pág. 1/1
Unit 42 analyzed how AWS neutralizes publicly exposed IAM access keys by automatically attaching the AWSCompromisedKeyQuarantine managed policy, and how that policy has changed since its release on Aug. 11, 2020. The mechanism relies on the GitHub secret scanning partner program, which alerts AWS when long-term keys appear in public repos…
A public repository exposed sensitive data from Smart Sampa, the Prefeitura de São Paulo video surveillance system, for about 11 months, allowing unauthorized access to more than 58,000 cameras. Cameras covered sensitive sites such as daycare centers, schools, hospitals and drug-treatment centers. According to UOL, reporters used the expo…
Ivanti released security updates for an actively exploited Connect Secure zero-day, CVE-2026-104935, and six other vulnerabilities in Neurons Patch for Intune and Xtraction. CVE-2026-104935 is a spoofing-based authentication bypass that lets remote, unauthenticated attackers execute arbitrary commands, and Ivanti confirmed limited exploit…
