The Cybersecurity Talent Gap – Where do We Go from Here?
By , VP of Human Resources and Talent Acquisition, Currently there are , yet there are still upwards of 700,000 positions in the field that…
Month: April 2023
How Elastic Attracts and Retains Top Hackers Without Offering the Highest Bounties
At HackerOne’s 2021 Security@ conference, we spoke with Douglas Day, an experienced ethical hacker and senior product security engineer who has managed Elastic’s bug bounty…
Microsoft removes LSA Protection from Windows settings to fix bug
Microsoft has fixed a known issue triggering Windows Security warnings that Local Security Authority (LSA) Protection is off by removing the feature’s UI from settings.…
Meet the Team: Johan Svensson – Growing with Detectify
Johan Svensson joined Detectify as an intern in March 2017, and was hired full-time in October that same year. Now he works as a senior…
Google disrupts the CryptBot info-stealing malware operation
Google is taking down malware infrastructure linked to the Cryptbot info stealer after suing those using it to infect Google Chrome users and steal their data. The…
Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks
Apr 26, 2023Ravie LakshmananLinux / Cyber Threat The Chinese nation-state group dubbed Alloy Taurus is using a Linux variant of a backdoor called PingPull as…
Microsoft rolls out Phone Link for iOS to all Windows 11 users
Microsoft is rolling out Phone Link for iOS to all Windows 11 and iPhone users, with the rollout expected to complete by mid-May. The Phone…
Application Programming Interface (API) testing for PCI DSS compliance
[ This article was originally published here ] This is the fourth blog in the series focused on PCI DSS, written by an AT&T Cybersecurity…
Bug Bounty Platforms [Best Choices For a Bug Bounty Program]
What Is a Bug Bounty Platform? A bug bounty platform is software that deploys and tracks a bug bounty program. A bug bounty is a…
Thousands of Apache Superset servers exposed to RCE attacks
Apache Superset is vulnerable to authentication bypass and remote code execution at default configurations, allowing attackers to potentially access and modify data, harvest credentials, and…
F-Secure to acquire Lookout Mobile Security
F-Secure has made an official announcement that it is going to acquire the mobile security business of Lookout, and the deal might be completed by…
Police Scotland receive formal notice about cloud system
The Scottish biometrics commissioner has served Police Scotland with an information notice, requiring the force to demonstrate that its deployment of a cloud-based digital evidence…