Security News

Misconfigured Firebase Databases Exposing Data in Mobile Apps
2022-03-17 14:36

Thousands of mobile apps - some of which have been downloaded tens of millions of times - are exposing sensitive data from open cloud-based databases due to misconfigured cloud implementations, new research from Check Point has found. Check Point Research found that in three months' time, 2,113 mobile apps using the Firebase cloud-based database exposed data, "Leaving victims unprotected and easily accessible for threat actors to exploit," according to a blog post published this week.

Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data
2022-03-16 00:53

Researchers have disclosed seven new security vulnerabilities in an open-source database management system solution called ClickHouse that could be weaponized to crash the servers, leak memory contents, and even lead to the execution of arbitrary code. CVE-2021-43304 and CVE-2021-43305 - Heap buffer overflow flaws in the LZ4 compression codec that could lead to remote code execution.

Hackers Backdoor Unpatched Microsoft SQL Database Servers with Cobalt Strike
2022-02-21 23:22

Vulnerable internet-facing Microsoft SQL Servers are being targeted by threat actors as part of a new campaign to deploy the Cobalt Strike adversary simulation tool on compromised hosts. "Attacks that target MS SQL servers include attacks to the environment where its vulnerability has not been patched, brute forcing, and dictionary attack against poorly managed servers," South Korean cybersecurity company AhnLab Security Emergency Response Center said in a report published Monday.

Is higher security a benefit of database migration to the cloud?
2022-02-18 05:00

MariaDB announced key findings from its survey that shows no one's staying behind as businesses move forward with database migration to the cloud. Those surveyed included IT Heads, DBAs and software developers, all of whom had some responsibility for the selection and management of databases-and all said their business' cloud database migration was in place, in progress or planned.

High-Severity RCE Bug Found in Popular Apache Cassandra Database
2022-02-16 16:03

Researchers have shared details about a now-patched, high-severity security bug in the Apache Cassandra open-source NoSQL distributed database that's easy to exploit and, if left unpatched, could enable attackers to gain remote code execution. In a Tuesday writeup, JFrog security researcher Omer Kaspi said that on the upside, the only Cassandra systems that are vulnerable to the flaw are those with a particular, non-standard and, specifically, not recommended configuration.

High-Severity RCE Security Bug Reported in Apache Cassandra Database Software
2022-02-16 03:20

Researchers have revealed details of a now-patched high-severity security vulnerability in Apache Cassandra that, if left unaddressed, could be abused to gain remote code execution on affected installations. "This Apache security vulnerability is easy to exploit and has the potential to wreak havoc on systems, but luckily only manifests in non-default configurations of Cassandra," Omer Kaspi, security researcher at DevOps firm JFrog, said in a technical write-up published Tuesday.

Bunnie Huang’s Plausibly Deniable Database
2022-02-10 12:13

Most security schemes facilitate the coercive processes of an attacker because they disclose metadata about the secret data, such as the name and size of encrypted files. Precursor is a device we designed to keep secrets, such as passwords, wallets, authentication tokens, contacts and text messages.

Database security market to reach $16,273.8 million by 2028
2022-02-04 04:00

The database security market is expected to reach $16,273. Database security solutions incorporate advanced security products such as internet traffic monitoring with a wide range of additional features.

Ransomware means your database IS the front line. How are you defending it?
2022-02-01 18:00

That's why databases are at the top of the hit list for ransomware gangs, and why organisations need to consider their data operation as very much in the front line when it comes to defending against disaster. Given that it's not a question of if but when you'll be hit with ransomware and other threats, it stands to reason that protecting the database AND ensuring rapid recovery in the event of a disaster is essential to your organisation's survival.

Major Discord outage caused by API and database issues
2022-01-26 20:27

The outage started at 2:49 PM EST and was initially caused by an issue with the application programming interface outage, preventing various services from communicating with each other. After resolving the API issue, Discord discovered a secondary issue with a database cluster, causing further problems.