InfoSecBulletin Cybersecurity for mankind
The Zeroday Cloud hacking competition in London awarded $320,000 to researchers for showing serious remote code execution vulnerabilities in cloud infrastructure components. This is the first event focused on cloud systems, hosted by Wiz Research with Amazon Web Services, Microsoft, and Google Cloud.
Researchers achieved an 85% success rate in 13 hacking sessions, uncovering 11 zero-day vulnerabilities.
270+ Zimbra servers compromised in continuous attacks
Singapore Approves 200MW Data-Centre Expansion Under Second Call
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Wiz said that $200,000 was awarded on the first day for finding vulnerabilities in Redis, PostgreSQL, Grafana, and the Linux kernel.
On the second day, researchers made $120,000 by exploiting vulnerabilities in Redis, PostgreSQL, and MariaDB, which are widely used databases for storing sensitive information.
The Linux kernel was breached due to a container escape flaw, enabling attackers to bypass isolation between cloud tenants and compromising cloud security.
Researchers at cybersecurity companies Zellic and DEVCORE were awarded $40,000 for their success.
Team Xint Code won the first Zeroday Cloud competition by successfully exploiting Redis, MariaDB, and PostgreSQL, earning $90,000 for their efforts. The awarded amount is just a small part of the $4.5 million prize pool available for researchers demonstrating exploits.
The eligible categories and products that had no exploits in the competition are AI (Ollama, vLLM, Nvidia Container Toolkit), Kubernetes, Docker, web servers (nginx, Apache Tomcat, Envoy, Caddy), Apache Airflow, Jenkins, and GitLab CE.
