#denialofservice — Public Fediverse posts

MongoDB fixed 24 MongoDB Server vulnerabilities, including a critical auth bypass (CVE-2026-82067) and unauthenticated denial of service flaws. Patch now.

#MongoDB #Vulnerability #CVE #DatabaseSecurity #DenialOfService #InfoSec #PatchNow #CyberSecurity #MongoDBServer #AppSec

https://securityonline.info/mongodb-server-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Researchers from the National Research Center for Applied Cybersecurity in Germany have disclosed a critical flaw in the way DNSSEC was designed and dubbed it "KeyTrap".

Essentially, the "KeyTrap" flaw allows an attacker to use a specially crafted DNS packet to cause a denial-of-service on the targeted DNSSEC-validating DNS server.

Since the flaw exists in the DNSSEC standard itself, it affects all major DNS server implementations like BIND9, Unbound, Microsoft DNS and etc. All public resolvers like Google DNS and Cloudflare DNS are also affected.

For more: www.athene-center.de/en/news/press/key-trap & infosec.exchange/@tychotithonus/111924626712765292

#infosec #cybersecurity #dnssec #DNS #KeyTrap #DoS #DenialofService

Extremely grateful for having the opportunity to contribute to the latest ENISA Threat Landscape for DoS Attacks. It is an important report from ENISA that gives useful insights into a cybersecurity threat that is often understudied. Read here: https://www.enisa.europa.eu/publications/enisa-threat-landscape-for-dos-attacks

#CyberSecurity #ThreatResearch #DoS #infosec #CyberAttacks #ThreatLandscape #ThreatIntelligence #DenialOfService #DDoS #ENISA