Extended notes for security updates from 26 July
For continuous coverage, we push out a major Detectify security updates every two weeks, keeping our tool up-to-date with new findings, features and improvements sourced from…
Month: May 2023
The Challenge of Protecting Websites from Third-Party Scripts
May 05, 2023The Hacker NewsWebsite Security / Data Safety Third-party apps such as Google Analytics, Meta Pixel, HotJar, and JQuery have become critical tools for…
Santander reports increase in scams and admits fraud head was impersonated
Santander Bank has reported an 11% increase in fraud through impersonation scams, and admitted that its own head of fraud was impersonated as part of…
Cybersecurity Vendor Consolidation: Securing More with Less
Remember those days, pre-pandemic, when you thought your security scope was complex? But now, with employees at home, new video and collaboration apps being rolled…
Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN
May 05, 2023Ravie Lakshmanan Italian corporate banking clients are the target of an ongoing financial fraud campaign that has been leveraging a new web-inject toolkit…
Apple results show Mac sales hit by economic slowdown
Apple has posted quarterly revenue of $94.8bn, down 3% compared with last year. Yet the company’s services business posted an “all-time record” revenue of $20.9bn,…
Top 4 takeaways from AppSec EU and Black Hat USA
We recently attended two key security conferences, OWASP AppSec EU and Black Hat USA to talk about web application security and the benefits of automation…
N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks
May 05, 2023Ravie LakshmananCyber Threat / Malware The North Korean state-sponsored threat actor known as Kimsuky has been discovered using a new reconnaissance tool called…
Former Uber CSO avoids prison for concealing data breach
Joe Sullivan, the former Uber CSO who has been convicted last year for attempting to cover up a data breach Uber suffered in 2016 and…
Over a Dozen PHP Packages with 500 Million Compromised
May 05, 2023Ravie LakshmananProgramming / Software Security PHP software package repository Packagist revealed that an “attacker” gained access to four inactive accounts on the platform…
Security Think Tank: Thinking beyond IAM in the cloud
Moving a company’s IT into the cloud is seen a reasonable thing to do for many companies as it has many attractions including cost, space…
Dark Side Of AI Putting Security At Risk
Everyone is talking about ChatGPT, the free chatbot based on artificial intelligence created by OpenAI. The non-profit artificial intelligence research organization promotes the development of…