Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Noam Atias
What a Cluster: Local Volumes Vulnerability in Kubernetes
Being aware of the lack of input sanitization in Kubernetes source code means you can take outside precautions to help avoid a serious security impact. Editorial and additional commentary by Tricia Howard Akamai security researcher Tomer Peled recently discovered a high-severity vulnerability in Kubernetes that was assigned CVE-2023-5528 with a CVSS score of 7.2. The vulnerability allows remote code execution with SYSTEM privileges on all Windows endpoints within a Kubernetes cluster.
NetKiller.Condi Botnet Exploits CVE-2024-0778 One Week After Disclosure
A vulnerability has been discovered in the firmware of Zhejiang Uniview ISC camera model 2500-S up to firmware version 20210930. This vulnerability allows for OS command injection by manipulating specific request arguments. The vulnerability, identified as CVE-2024-0778, affects products that are no longer supported by the maintainer as the product has reached its end-of-service stage.
Exploitation Observed: Ivanti Connect Secure — CVE-2023-46805 and CVE-2024-21887 | Akamai
Ivanti Connect Secure has emerged as a highly coveted asset for potential attackers who are seeking an entry point into the internal enterprise network. On January 10, 2024, multiple parties (Ivanti, Volexity, and Mandiant) disclosed the existence of a zero-day vulnerability that affects the Ivanti Connect Secure and Ivanti Policy Secure gateways. This exploit chain leads to remote code execution. Intense scanning for the vulnerability commenced on January 16, 2024.
Observed Scanning Activity for CVE-2024-22024 - XXE Vulnerability in Ivanti Products
Over the last few weeks, Ivanti has disclosed numerous critical CVEs. The most recent — CVE-2024-22024 — is no different. Although it does not have as high a CVSS score as previous vulnerabilities, CVE-2024-22024 will still likely be a prime target for attackers. On February 8, 2024, Ivanti published an advisory for CVE-2024-22024. Ivanti originally reported that this flaw was discovered during internal testing.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Noam
Contact Noam, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack