New dangerous ransomware encrypts itself and uses VPN flaws to encrypt network devices
Researchers in the field of information security have found a new strain of ransomware that has been given the name CACTUS and that infiltrates targeted…
Month: May 2023
Transparency Builds Trust | HackerOne
Someone called it a “breach,” and the world took notice. Here is the story. There is no trust without transparency. For us at HackerOne, it…
Microsoft May 2023 Patch Tuesday fixes 3 zero-days, 38 flaws
Today is Microsoft’s May 2023 Patch Tuesday, and security updates fix three zero-day vulnerabilities and a total of 38 flaws. Six vulnerabilities are classified as…
Is your Magento store vulnerable? Why it’s time to put security first
Magento is not only interesting for retailers – hackers like to target widely used platforms and the fact that online stores handle sensitive payment information…
Spanish police dismantle phishing operation linked to crime ring
The National Police of Spain have arrested two hackers, 15 members of a criminal organization, and another 23 people involved in illegal financial operations in…
GitHub now auto-blocks token and API key leaks for all repos
GitHub is now automatically blocking the leak of sensitive information like API keys and access tokens for all public code repositories. Today’s announcement comes after…
Using Bug Bounty Talent Pools to Attract and Maintain Top Talent
Security leaders today face a complex set of talent challenges—from training on the latest attack vectors, to finding talent with the right skills, to preventing…
Microsoft issues optional fix for Secure Boot zero-day used by malware
Microsoft has released security updates to address a Secure Boot zero-day vulnerability exploited by BlackLotus UEFI malware to infect fully patched Windows systems. Secure Boot…
Thousands of vulnerable Magento web stores out there
We checked 30,000 Magento stores for three publicly available vulnerabilities that are sometimes found in older Magento installations. Despite the most recent of the three…
Food distribution giant Sysco warns of data breach after cyberattack
Sysco, a leading global food distribution company, has confirmed that its network was breached earlier this year by attackers who stole sensitive information, including business,…
Critical Ruckus RCE flaw exploited by new DDoS botnet malware
A new malware botnet named ‘AndoryuBot’ is targeting a critical-severity flaw in the Ruckus Wireless Admin panel to infect unpatched Wi-Fi access points for use…
This Season, Give the Gift of Data-Driven Insight
It’s that time of the year again. Time to dig out your wrinkled “No, I can’t fix your computer” t-shirt from the bottom of the…