Upon blocking a request, GCP Org policy constraints were logging the deny
logs in Principal''s project and the blocking project. An attacker could use those
logs to exfiltrate any data, by making r...
Wed, Sep 22nd, 2021
A vulnerability was discovered in the Anthos Identity Service (AIS) LDAP module
of Anthos clusters on VMware versions 1.8 and 1.8.1 where a seed key used in generating
keys is predictable. With thi...
If a user with AWS WorkSpaces 3.0.10-3.1.8 installed visits a page in their
web browser with attacker controlled content, the attacker can get zero click
RCE under common circumstances.
Tue, Sep 21st, 2021