article thumbnail

Top 10 web application vulnerabilities in 2021–2023

SecureList

More than a third (39%) used the microservice architecture. Broken Authentication 5. Broken Authentication 5. Mitigation: implement authentication and authorization controls according to the role-based access model. Most of the web applications were owned by companies based in Russia, China and the Middle East.

Passwords 100
article thumbnail

US CISA and NSA publish guidance to secure Kubernetes deployments

Security Affairs

It guides system administrators and developers of National Security Systems on how to deploy Kubernetes with example configurations for the recommended hardening measures and mitigations. Use strong authentication and authorization to limit user and administrator access as well as to limit the attack surface.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

API Security for the Modern Enterprise

IT Security Guru

Microservices Architecture has Created a Security Blind Spot. When you have multiple services communicating with each other through APIs, then your entire system becomes exposed when any one service gets hacked. Tools like two-factor authentication, rate limiting, and DDoS protection can go a long way in securing APIs.

DDOS 114
article thumbnail

XMR crypto miner switches from arm IoT devices to X86/I686 Intel servers

Security Affairs

“This one seems to target enterprise systems.” ” The expert explained that the XMR cryptominer was optimized for Intel x86 (both 32bit or 64bit architecture) and Intel 686 processors. System administrators need to employ security best practices with the systems they manage.”

IoT 89
article thumbnail

Experts spotted Syslogk, a Linux rootkit under development

Security Affairs

The experts pointed out that it also allows authenticated user-mode processes to interact with the rootkit to control it. Linux rootkits are malware installed as kernel modules in the operating system. Experts highlighted that the kernel rootkit is hard to detect, it enables hiding processes, files, and even the kernel module.

Malware 79
article thumbnail

Facebook May Have Gotten Hacked, and Maybe It’s Better We Don’t Know

Adam Levin

Facebook’s Two-Factor Authentication phone numbers exposed: After prompting users to provide phone numbers to secure their accounts, Facebook allows anyone to look up their account by using them. Denying anything happened gives system administrators more time to identify and patch newly discovered vulnerabilities.

Hacking 100
article thumbnail

How to Perform a Vulnerability Scan in 10 Steps

eSecurity Planet

This thorough scan with a comprehensive configuration helps in the identification of the software and services operating on the systems, which is critical for successful CVE scanning. Performing a complete scan with authentication, which entails giving valid login credentials, may increase the number of CVE findings identified.