Hot Topics

Privilege Escalation

principle of least privilege

Cloud Security: Maintaining Least Privilege

| | Cloud Security, Data Governance, dormant identities, Identity & IAM, identity security, least privilege, principle of least privilege, Privilege Escalation, security policy, separation of duty, Skill Level: Learner
Reading Time: 8 minutes There are four main identity risks that determine the necessity of least privilege. These include the separation of duty, dormant identities, privilege escalation, and toxic combinations ...
Sonrai | Enterprise Cloud Security Platform

Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 22, 2022

| | Chrome, critical vulnerability, Featured Articles, Microsoft, Privilege Escalation, VERT News, VMware
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us ...
The State of Security

Zoom Exploit on MacOS

| | Apple, Exploits, Privilege Escalation, Uncategorized, Vulnerabilities
This vulnerability was reported to Zoom last December: The exploit works by targeting the installer for the Zoom application, which needs to run with special user permissions in order to install or ...
Schneier on Security
Elevating Privileges with Authentication Coercion Using DFSCoerce

Elevating Privileges with Authentication Coercion Using DFSCoerce

| | adfs, Authentication, corporate security, DFSCoerce, Privilege Escalation, relaying attacks, Tools & Techniques
Background In our previous blog post, we talked about the recently-published DFSCoerce utility which is useful for forcing NTLM or Kerberos authentication by interacting with the Distributed File Service (DFS) over Remote ...
Blog - Praetorian
Chaining MFA-Enabled IAM Users with IAM Roles for Potential Privilege Escalation in AWS

Chaining MFA-Enabled IAM Users with IAM Roles for Potential Privilege Escalation in AWS

| | aws, Cloud Security, IAM Roles, Privilege Escalation, role chaining, Tools & Techniques, Vulnerability Research
 Overview In AWS, sts:AssumeRole is an action within AWS’s Security Token Service that allows existing IAM principals to access AWS resources to which they may not already have access. For example, Role ...
Blog - Praetorian

Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of April 25, 2022

| | bug bounty program, cisa, Featured Articles, Linux, patches, Privilege Escalation, Ransomware, VERT News, VPN, vulnerability
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us ...
The State of Security
AI, defense, cybersecurity,

Record High Ransomware Payouts in 2021 as Extortion Evolves 

| | Conti, Palo Alto Networks, Privilege Escalation, Ransomware, rEvil, Unit 42
Flush with cash from successful ransomware campaigns, cybercriminals are investing in more sophisticated technology and using new tactics to drive up ransomware payments even further, with the Conti ransomware group responsible for ...
Security Boulevard
DEF CON 29 Adversary Village

DEF CON 29 Adversary Village – Carlos Polop’s ‘New Generation Of PEAS’

| | Adversary Village, Application Security, cybersecurity education, DEF CON, DEF CON 29, education, Hardware Security, Industrial Security, Information Security, Infosec Education, Network Security, Privilege Escalation, security, Security Education
Our thanks to DEFCON for publishing their outstanding DEFCON 29 Adversary Village videos on the Conferences’ YouTube channel. Permalink ...
Infosecurity.US
Azurescape Vulnerability: More Evidence that  Microsoft Should Leave Security to the Experts

Azurescape Vulnerability: More Evidence that  Microsoft Should Leave Security to the Experts

| | Azurescape, cloud computing, Cybersecurity, EDR, Endpoint Controls, endpoint detection and response, Endpoint Protection Platform, EPP, Extended Detection and Response, Hafnium, Microsoft, Microsoft Exchange, Privilege Escalation, security, Software Security, SolarWinds Attacks, Unified Endpoint Security
It’s been a busy couple weeks for Microsoft—and not in a good way. Following the news that a configuration error left Azure cloud customer data exposed to potential compromise, and a security ...
Blog
This Mouse Gives you Admin on Windows

This Mouse Gives you Admin on Windows

| | Driver security in Windows 10, It only takes a shift-right-click, persistence, Privilege Escalation, Razer, SB Blogwatch
Razer gaming mice come with a classic elevation of privilege bug. And one that’s incredibly simple to exploit: Just plug in a mouse ...
Security Boulevard
Load more