@nish profile picture
Nish Vamadevan @nish

CISSP - Security, Network, Cloud & Infrastructure. Advisor | Strategist | Architect - #CyberSecurity #InfoSec #Cloud #Network #Linux #Tech

Joined February 2008
  • Tweets 1,339
  • Following 303
  • Followers 316
141 Photos and videos
Pinned Tweet
Nish Vamadevan@nish
15 Oct 2019
One of the biggest yet underestimated risk out there is Cyber Threats. #CyberSecurity #InfoSec #ITSecurity
1
7
13
Nish Vamadevan@nish
18 Dec 2024
A hacker has leaked data stolen recently from a Cisco DevHub instance, but claims it’s only a fraction of the total amount of files that was taken. securityweek.com/hacker-leak… #CyberSecurity #infosec

Hacker Leaks Cisco Data

IntelBroker has leaked 2.9 Gb of data stolen recently from a Cisco DevHub instance, but claims it’s only a fraction of the total. 

securityweek.com
1
383
Nish Vamadevan@nish
11 Dec 2024
US doughnut chain Krispy Kreme suffered a cyberattack in November that impacted portions of its business operations, including placing online orders. bleepingcomputer.com/news/se… #cybersecurity #infosec

Krispy Kreme cyberattack impacts online orders and operations

US doughnut chain Krispy Kreme suffered a cyberattack in November that impacted portions of its business operations, including placing online orders.

bleepingcomputer.com
168
Nish Vamadevan@nish
4 Jun 2024
London hospitals declare critical incident after cyber attack. A “major IT incident” affected the pathology departments of King’s College Hospital and of Guy’s and St Thomas’ NHS Foundation Trust. ft.com/content/64ac2bd3-7bff… #CyberSecurity #CyberAttack #NHS

London hospitals declare critical incident after cyber attack

Ransomware attempt on provider forces cancellations and delays blood tests and transfusion deliveries

ft.com
1
302
Nish Vamadevan@nish
12 May 2024
Zscaler calls investigators in amid breach speculation techmonitor.ai/technology/cy… #CyberSecurity #InfoSec #Zscaler #Breach
1
279
Nish Vamadevan@nish
24 Apr 2024
ArcaneDoor hackers exploit Cisco zero-days to breach government networks. #CyberSecurity #Cisco #ZeroDay #ASA #FTD bleepingcomputer.com/news/se…

ArcaneDoor hackers exploit Cisco zero-days to breach govt networks

​Cisco warned today that a state-backed hacking group has been exploiting two zero-day vulnerabilities in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) firewalls since November...

bleepingcomputer.com
170
Nish Vamadevan@nish
20 Feb 2024
🚨 #SecurityAlert 🚨 Arbitrary Authentication Relay and Session Hijack vulnerabilities discovered in deprecated VMware Enhanced Authentication Plug-in (EAP). CVE-2024-22245 and CVE-2024-22250 identified. Stay secure! 🔒 #CyberSecurity #VMware #CVE2024 vmware.com/security/advisori…

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
1
144
Nish Vamadevan@nish
3 Feb 2024
AnyDesk says hackers breached its production servers, reset passwords bleepingcomputer.com/news/se… #CyberSecurity #Infosec #AnyDesk #Breach

AnyDesk says hackers breached its production servers, reset passwords

AnyDesk confirmed today that it suffered a recent cyberattack that allowed hackers to gain access to the company's production systems. BleepingComputer has learned that source code and private code...

bleepingcomputer.com
165
Nish Vamadevan@nish
14 Dec 2023
A critical DOM-Based XSS vulnerability discovered in Palo Alto Networks PAN-OS software (CVE-2023-6790). 🛡️ A remote attacker could execute using a specially crafted link on the PAN-OS web interface. #CyberSecurity #PaloAltoNetworks #Vulnerability security.paloaltonetworks.co…

CVE-2023-6790 PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when...

security.paloaltonetworks.com
1
184
Nish Vamadevan@nish
1 Dec 2023
🚨 Security Alert 🚨 An authentication bypass vulnerability discovered in VMware Cloud Director Appliance with a CVE score of 9.8. CVE-2023-34060 for details. Stay vigilant, Stay secure. #Cybersecurity #VMware #infosecurity vmware.com/security/advisori…

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
166
Nish Vamadevan@nish
14 Nov 2023
🔐 A critical authentication bypass vulnerability in VMware Cloud Director Appliance has been identified via CVE-2023-34060 value 9.8. It’s time to patch to the latest updates to stay secure. #Cybersecurity #Vulnerability #vmware vmware.com/security/advisori…

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
141
Nish Vamadevan@nish
8 Nov 2023
Sumo Logic, a leading player in cloud-native big data and security, has revealed a potential breach linked to compromised AWS credential. #SumoLogic #SecurityBreach #AWS #Cybersecurity 🔒💻🔍" bleepingcomputer.com/news/se…

Sumo Logic discloses security breach, advises API key resets

Security and data analytics company Sumo Logic disclosed a security breach after discovering that its AWS (Amazon Web Services) account was compromised last week.

bleepingcomputer.com
115
Nish Vamadevan@nish
25 Oct 2023
vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. Critical: CVE-2023-34048 and CVE-2023-34056 vmware.com/security/advisori… #cybersecurity #infosec #vulnerability #vmware #vCenter

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
249
Nish Vamadevan@nish
20 Oct 2023
Multiple security vulnerabilities in VMware Workstation and Fusion were reported to VMware. It is tracked under CVE-2023-34044, CVE-2023-34045, CVE-2023-34046 vmware.com/security/advisori… #CyberSecurity #Infosec #VMWare #Fusion #Workstation #Vulnerability

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
112
Nish Vamadevan@nish
20 Oct 2023
Multiple vulnerabilities in VMware Aria Operations for Logs were privately reported to VMware. It is tracked under CVE-2023-34051 vmware.com/security/advisori… #CyberSecurity #Infosec #VMWare #Vulnerability

Support Content Notification - Support Portal - Broadcom support portal

support.broadcom.com
94
Nish Vamadevan@nish
17 Oct 2023
There have been indications that a built-in capability within ServiceNow could potentially be leveraged to extract data from records as an unauthenticated user. #CyberSecurity #infosec #Privacy #DataPrivacy #Regulations #GDPR #ServiceNow enumerated.ie/index/servicen…

Data Exposure and ServiceNow: The Elephant in the ITSM Room — Enumerated

This research is written and discovered by Aaron Costello (Twitter @ConspiracyProof). Daniel Miessler has had absolutely no part in the research nor this article. His sole link to the research is...

enumerated.ie
113
Nish Vamadevan@nish
4 Aug 2023
Fortinet VPN bug tops CISA’s list of most exploited vulnerabilities in 2022 No Software is bullet proof, patch it or manage the risk accordingly. #CyberSecurity #infosec #bugs #vulnerability #CISA #Exploit #Fortinet therecord.media/fortinet-vpn… via @TheRecord_Media

Fortinet VPN bug tops CISA’s list of most exploited vulnerabilities in 2022

A joint advisory from the Five Eyes nations warns that malicious cyber actors are exploiting older software vulnerabilities more frequently than recently disclosed ones.

therecord.media
155
Nish Vamadevan@nish
27 Jul 2023
OverlayFS: Easy to exploit local privilege escalation vulnerabilities in Ubuntu Linux affecting 40% of Ubuntu users. #CyberSecurity #infosec #Ubuntu #vulnerability #linux #wiz #OverlayFS wiz.io/blog/ubuntu-overlayfs…

GameOverlay Vulnerability Impacts 40% of Ubuntu Workloads | Wiz Blog

Wiz Research discovers CVE-2023-2640 & CVE-2023-32629, 2 privilege escalation vulnerabilities in Ubuntu's OverlayFS module impacting 40% of cloud workloads.

wiz.io
110
Nish Vamadevan@nish
12 Jul 2023
Azure AD is being renamed to Microsoft Entra ID devblogs.microsoft.com/ident… #Microsoft #Azure #Cloud #AzureAD

Azure AD is being renamed to Microsoft Entra ID | Microsoft Entra Identity Platform

Azure Active Directory (Azure AD) is being renamed in unification with the expanded Microsoft Entra identity and network access product family.

devblogs.microsoft.com
62
Nish Vamadevan@nish
26 Jun 2023
Disadvantages of Single Cloud, SaaS, or IaaS Strategy nish.com/blog/disadvantages-… #Strategy #Cloud #SaaS #IaaS #Microsoft365 #SSO #Okta

Disadvantages of Single Cloud, SaaS, or IaaS Strategy

An overall look at the risks involved on depending solely on a single Cloud/SaaS/IaaS provider and safeguarding your digital assets.

nish.com
1
110
Nish Vamadevan@nish
25 Jun 2023
Microsoft Teams vulnerability allows attackers to deliver malware to employees. #cybersecurity #infosec #Microsoft #Teams #vulnerability #Malware helpnetsecurity.com/2023/06/…

Microsoft Teams vulnerability allows attackers to deliver malware to employees - Help Net Security

Security researchers have found a bug that could allow attackers to deliver malware directly into employees' Microsoft Teams inbox.

helpnetsecurity.com
84
Load more