Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

misconfiguration

Everything RedTeam Tribune has reported about misconfiguration: 2 stories, newest first. Part of our Data Breaches coverage.

14 Oct
Data Breaches

Prevent Cloud Storage Leaks: Configuration Hardening Steps

Most cloud data leaks stem from default public access settings that remain active until a manual review explicitly disables them for every new bucket.

09 Oct
Cloud Security

Cloud Security Assessments: How to Find Hidden Risks

Most cloud failures stem from misconfigured settings rather than external breaches, making internal audits more effective than perimeter defenses alone.