FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel,