Cyber Security – Monthly Exploitation Trend Report – Mar 2025

Leave a Comment / Security /

SL.NO CVE Vulnerability Vendor Service Version CVSS  Severity 1 CVE-2025-0927 Linux Kernel Privilege Escalation Linux Kernel Organization Linux Kernel Ubuntu 22.04 with Linux Kernel 6.5.0-18-generic. 7.8 HIGH 2 CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability​ Google​ Google Chrome Browser Prior to 134.0.6998.177/.178 on Windows systems. 8.3 HIGH 3 CVE-2025-26633 Windows MMC Zero-Day Vulnerability Microsoft  Microsoft […]

Cyber Security – Monthly Exploitation Trend Report – Mar 2025 Read More »

[Announcement] Amazon RDS for PostgreSQL 12 will reach end of standard support on February 28, 2025. Upgrade your database before March 1, 2025.

Leave a Comment / AWS /

If you have received this message from AWS, you need to act quickly to avoid surge in your AWS bill. Attention AWS RDS Users Utilizing PostgreSQL 12: PostgreSQL 12 is nearing its end-of-standard-support lifecycle. The community will deprecate it in November 2024, ceasing all bug fixes and security patches. Amazon RDS standard support for PostgreSQL

[Announcement] Amazon RDS for PostgreSQL 12 will reach end of standard support on February 28, 2025. Upgrade your database before March 1, 2025. Read More »

Cyber Security – Monthly Exploitation Trend Report – Feb 2025

Leave a Comment / Security /

Top 10 CVEs 2025 – January-February SL.NO CVE Vulnerability Vendor Service Version CVSS  Severity 1 CVE-2025-0316 authentication bypass Chimpstudio WP Directory box Manager  3.1 9.8 CRITICAL 2 CVE-2025-24370 XSS, DoS, and Authentication Bypass Adamghill Django-unicorn 4.0 9.3 CRITICAL 3 CVE-2025-23196 Code Injection  Apache Software Foundation Apache Ambari <2.7.9 8.8 HIGH 4 CVE-2025-26768 CSRF to Stored

Cyber Security – Monthly Exploitation Trend Report – Feb 2025 Read More »

Windows Themes zero-day bug exposes users to NTLM credential theft

Leave a Comment / Security /

A New Bypass Detected by ACROS Security A new zero-day vulnerability has been exposed recently! The newly discovered zero-day bug on Windows Theme files is exposing people’s NTLM credentials. It is one of the serious risks identified recently by Akamai researcher, Tomer Peled. Researchers at ACROS security have reported that this vulnerability is a serious

Windows Themes zero-day bug exposes users to NTLM credential theft Read More »

[Action Required] Deprecation of Amazon RDS M4, R4, and T2 database instance types on MySQL, MariaDB, and PostgreSQL [AWS Account: ]

Leave a Comment / AWS /

You have probably landed here with an email notification received from AWS. You are not alone! Yes, AWS is indeed deprecating the M4, R4, or T2 instance types. So you should migrate your instance to the next available series before May 31, 2024 Upgrade Path If you need any support for this migration, we HAZERCLOUD

[Action Required] Deprecation of Amazon RDS M4, R4, and T2 database instance types on MySQL, MariaDB, and PostgreSQL [AWS Account: ] Read More »

CVE-2024-46188 Fake WordPress Security Alert and WP Takeover

Leave a Comment / Security, WordPress /

We wanted to give you a heads up about a recent phishing attempt targeting WordPress users. Some of you might have received a deceptive email claiming to be from the WordPress Security Team. This email raises a false alarm about a non-existent vulnerability called “Remote Code Execution (RCE)” on your WordPress website. You might have

CVE-2024-46188 Fake WordPress Security Alert and WP Takeover Read More »

How to restrict s3 readable only from certain IP addresses or CloudFlare Only

Leave a Comment / AWS /

In many scenarios, it becomes crucial to control and limit access to your S3 bucket to specific IP addresses. Recently, we encountered a situation where we needed to grant access exclusively to CloudFlare IPs. To address this requirement, we implemented a solution by incorporating conditions into our S3 bucket policy. This approach allows for fine-grained

How to restrict s3 readable only from certain IP addresses or CloudFlare Only Read More »

Failed to create temporary file: /var/lib/mod_security/20xx

Leave a Comment / CentOS, SysAdmin /

Today, the developer reported that the he is not able to upload some files. As we checked, we were getting the following error on mod_security log. It looks like apache is getting denied while writing in to /var/lib/mod_security/ location. As a quick fix, we have modified the mod_security.conf configuration file located at /etc/httpd/conf.d/mod_security.conf Once modified,

Failed to create temporary file: /var/lib/mod_security/20xx Read More »

Scroll to Top