A serious security vulnerability has been discovered in the core runC container code that affects several open-source container management systems, potentially allowing attackers to escape Linux container and obtain unauthorized, root-level access to the host operating system. The vulnerability, identified as CVE-2019-5736, was discovered by open source security researchers Adam Iwaniuk and Borys […]

In most organisations using Active Directory and Exchange, Exchange servers have such high privileges that being an Administrator on an Exchange server is enough to escalate to Domain Admin. Recently I came across a blog from the ZDI, in which they detail a way to let Exchange authenticate to attackers […]

What’s the harm in opening a digital image? Well, Google has uncovered a new method to hack Android smartphones using malicious PNG files. The problem was disclosed this week in Google’s Android security bulletin. A serious flaw in the operating system’s framework can let a remote attacker execute computer code on an Android device […]

OverviewUsed by thousands of IT professionals and security researchers worldwide, the Remote Desktop Protocol (RDP) is usually considered a safe and trustworthy application to connect to remote computers. Whether it is used to help those working remotely or to work in a safe VM environment, RDP clients are an invaluable […]

Le groupe aéronautique européen Airbus a annoncé mercredi avoir détecté une intrusion dans le système informatique de sa division d’avions commerciaux. C’est la deuxième attaque ou intrusion visant un grand groupe français en deux jours. Airbus a annoncé dans un communiqué mercredi 30 janvier, avoir détecté un « incident de cybersécurité » dans les systèmes […]