2023 OWASP Top-10 Series: Introduction
In early June 2023, OWASP released the final version of the OWASP API Security Top-10 list update. At that time we published a “hot take”…
Month: July 2023
China’s Breach of Microsoft Cloud Email May Expose Deeper Problems
Microsoft wrote last week that its “investigations have not detected any other use of this pattern by other actors and Microsoft has taken steps to…
Erwin Eimers’ Outlook For Future
In an ever-evolving digital landscape where cyber threats loom larger than ever, robust cybersecurity practices have become paramount for organizations worldwide. At the forefront of…
On the Use of the Kolmogorov–Wiener Filter for Heavy-tail Process Prediction
Abstract: This paper is devoted to the investigation of the applicability of the Kolmogorov–Wiener filter to the prediction of heavy-tail processes. As is known, telecommunication…
Apple Threatens to Pull iMessage and FaceTime from U.K. Amid Surveillance Demands
Jul 22, 2023THNEncryption / Privacy Apple has warned that it would rather stop offering iMessage and FaceTime services in the U.K. than bowing down to…
You’ve got two weeks to patch Citrix NetScaler vulnerability CVE-2023-3519
A critical unauthenticated remote code execution vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway is being actively exploited The Cybersecurity and Infrastructure Security Agency…
Estée Lauder targeted by Cl0p and BlackCat ransomware groups
We take a look at reports of cosmetics firm Estée Lauder being attacked by the Cl0p and BlackCat ransomware groups. Estée Lauder is currently at…
Citrix/NetScaler vulnerability CVE-2023-3519 can cause more damage than one can imagine
The Cybersecurity and Infrastructure Security Agency (CISA) of the United States has issued a warning that threat actors attempted to target critical infrastructure using a…
Stolen Azure AD key offered widespread access to Microsoft cloud services
The Microsoft private encryption key stolen by Storm-0558 Chinese hackers provided them with access far beyond the Exchange Online and Outlook.com accounts that Redmond said…
CISA warns of attacks against Citrix NetScaler ADC and Gateway DevicesSecurity Affairs
The US CISA warns of cyber attacks targeting Citrix NetScaler Application Delivery Controller (ADC) and Gateway devices. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
The Week in Ransomware – July 21st 2023
This edition of the Week in Ransomware covers the last two weeks of news, as we could not cover it last week, and includes quite…
Few Fortune 100 Firms List Security Pros in Their Executive Ranks – Krebs on Security
Many things have changed since 2018, such as the names of the companies in the Fortune 100 list. But one aspect of that vaunted list…