Fortinet Warns of Active Exploitation of New SSL-VPN Pre-auth RCE VulnerabilityFortinet on Monday issued emergency patches for a severe security flaw affecting its FortiOS SSL-VPN product...
Day: December 16, 2022
Malware Strains Targeting Python and JavaScript Developers Through Official Repositories
Malware Strains Targeting Python and JavaScript Developers Through Official RepositoriesAn active malware campaign is targeting the Python Package Index (PyPI) and npm repositories for Python and...
Reported ECR Public Gallery Issue
Reported ECR Public Gallery IssueInitial Publication Date: 12/13/2022 9:00AM EST On November 14, 2022, a security researcher reported an issue in Amazon Elastic Container Registry (ECR)...
VMware Carbon Black Products and “User-Mode Hooking” Evasion Techniques
VMware Carbon Black Products and “User-Mode Hooking” Evasion TechniquesAttackers are always looking for a single fundamental technique they can use to fully defeat a given security...
Proofpoint Nabs Illusive, Signaling a Sunset for Deception Tech
Proofpoint Nabs Illusive, Signaling a Sunset for Deception TechContenido de la entradaLeer másProofpoint News Feed
December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More
December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and MoreTech giant Microsoft released its last set of monthly security updates for 2022 with fixes for...
A tell-all conversation: The biggest cloud security trends, challenges & solutions
A tell-all conversation: The biggest cloud security trends, challenges & solutionsEXECUTIVE SUMMARY: In this dynamic tell-all conversation, excerpted from The TechArena podcast, VP of Cloud Security...
FuboTV says World Cup streaming outage caused by a cyberattack
FuboTV says World Cup streaming outage caused by a cyberattackFuboTV has confirmed that a streaming outage preventing subscribers from watching the World Cup Qatar 2022 semifinal...
Dozens of cybersecurity efforts included in this year’s US NDAA
Dozens of cybersecurity efforts included in this year’s US NDAALast week, members of the US House of Representatives and Senate reconciled their versions of the annual...
SEC charges crew of social media influencers with $100m fraud
SEC charges crew of social media influencers with $100m fraudDefendants allegedly 'discussed their scheme’ in recorded chats on Discord and Twitter that ‘they believed were private’...
F5 expands security portfolio with App Infrastructure Protection
F5 expands security portfolio with App Infrastructure ProtectionF5 on Thursday announced the launch of F5 Distributed Cloud Services App Infrastructure Protection (AIP), expanding its SaaS-based security...
BrandPost: How to Choose Security Technology That Works
BrandPost: How to Choose Security Technology That WorksThe role of a security practitioner is difficult. From operational workflow changes to accommodating the latest application requirement impacting...
Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as ‘Critical’
Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as 'Critical'Microsoft has revised the severity of a security vulnerability it originally patched in September 2022, upgrading it to "Critical"...
Two-Thirds of Security Pros Have Burnt Out in Past Year
Two-Thirds of Security Pros Have Burnt Out in Past YearExcessive workload is the most common contributing factorLeer másExcessive workload is the most common contributing factor
Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political Entities
Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political EntitiesA Chinese-speaking advanced persistent threat (APT) actor codenamed MirrorFace has been attributed to a spear-phishing campaign targeting Japanese political establishments....
CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks
CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in AttacksThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities impacting Veeam Backup & Replication software...
MTTR “not a viable metric” for complex software system reliability and security
MTTR “not a viable metric” for complex software system reliability and securityMean time to resolve (MTTR) isn’t a viable metric for measuring the reliability or security...
Cybersecurity Insights with Contrast CISO David Lindner | 12/16
Cybersecurity Insights with Contrast CISO David Lindner | 12/16 Insight #1 " Lobbying from ITIC has pushed back on the recent OMB 22-18 directive to require...
Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS Botnet
Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS BotnetMicrosoft on Thursday flagged a cross-platform botnet that's primarily designed to launch distributed denial-of-service (DDoS) attacks against...
S3 Ep113: Pwning the Windows kernel – the crooks who hoodwinked Microsoft [Audio + Text]
S3 Ep113: Pwning the Windows kernel – the crooks who hoodwinked Microsoft [Audio + Text]Return o' the rookit, super-sneaky wireless spyware, credit card skimming, and patches...
Goodbye SHA-1: NIST Retires 27-Year-Old Widely Used Cryptographic Algorithm
Goodbye SHA-1: NIST Retires 27-Year-Old Widely Used Cryptographic AlgorithmThe U.S. National Institute of Standards and Technology (NIST), an agency within the Department of Commerce, announced Thursday that it's...