What’s a Vulnerability Disclosure Program & Do You Need One?
What Is a Vulnerability Disclosure Program? A VDP is a structured method for anyone to report vulnerabilities. VDPs should include a process for receiving a…
Month: April 2023
A ‘!password20231#’ password may not be as complex as you think
Modern IT system administrators know the importance of maintaining a strong password policy. In this article, we’ll explore the evolution of password policies, from basic…
TP-Link WAN-Side Vulnerability Exploited to Install Mirai
Mirai botnet exploits CVE-2023-1389 to add TP-Link Archer A21 (AX1800) routers to DDoS attacks. During the Pwn2Own Toronto event in December 2022, two hacking teams…
Akira Ransomware Lists Three Victims After Sprucing Up Site
Weeks after launching its new leak site, the Akira ransomware group has listed three victims: American engineering consultancy business 4LEAF, US-based packaging materials manufacturer Park-Rite,…
New Atomic macOS info-stealing malware targets 50 crypto wallets
A new macOS information-stealing malware named ‘Atomic’ (aka ‘AMOS’) is being sold to cybercriminals via private Telegram channels for a subscription of $1,000 per month.…
New Politically-Motivated Surveillance Campaign in Tajikistan
A little-known Russian-speaking cyber-espionage group has been linked to a new politically-motivated surveillance campaign targeting high-ranking government officials, telecom services, and public service infrastructures in…
Zopa’s emotional journey to becoming a bank
Zopa spent 15 years pioneering the peer-to-peer lending sector, only to drop that business to become a bank. CEO Jaidev Janardana tells Computer Weekly how…
Power Outage In Israel, Anonymous Sudan Takes Responsibility
An unexpected power outage in Israel on Thursday left the country scrambling. Although the utility bodies and government officials tried to dismiss it as a…
DevSecOps: Bridging the Gap Between Security and Development
At HackerOne’s recent 2021 Security@ conference, we spoke to Mike Hanley, CSO at GitHub. As a company that prizes security while serving tens of millions…
Photos: RSA Conference 2023 Early Stage Expo
RSA Conference 2023 is taking place at the Moscone Center in San Francisco. Check out our microsite for the conference for all the most important…
Detectify releases new and improved integrations
Integrations are intended to make work and the flow of information smoother. In our case, the integrations expedite critical vulnerability information found by Detectify to…
Photos: RSA Conference 2023, part 3
RSA Conference 2023 is taking place at the Moscone Center in San Francisco. Check out our microsite for the conference for all the most important…