Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

overprivileged cloud identities

Everything RedTeam Tribune has reported about overprivileged cloud identities: 2 stories, newest first. Part of our Cloud Security coverage.

14 Oct
Cloud Security

Overprivileged Cloud Identities: How to Find and Fix Excess Access

Most cloud breaches originate from existing accounts with unnecessary permissions, not from external hackers guessing weak passwords.

09 Oct
Cloud Security

Overprivileged Cloud Identities: Risks and Protection for Small Businesses

A single unused permission can bypass your entire security stack, turning a minor account into a master key that grants full control over your cloud infrastructure.