Malware stands out as the fastest-growing threat of 2024
93% of IT professionals believe security threats are increasing in volume or severity, a significant rise from 47% last year, according to Thales. The number…
Month: March 2024
19 million plaintext passwords exposed by incorrectly configured Firebase instances
Three researchers scanned the internet for vulnerable Firebase instances, looking for personally identifiable information (PII). Firebase is a platform for hosting databases, cloud computing, and…
How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl
In today’s digital-first business environment dominated by SaaS applications, organizations increasingly depend on third-party vendors for essential cloud services and software solutions. As more vendors…
IR35 reforms: IT contractors urged to reclaim tax they may have overpaid in off-payroll settlements
IT contractors found to be incorrectly operating outside of the IR35 off-payroll working rules during the 2019-2022 tax year have until 5 April 2024 to…
Vans Cyberattack: Personal Info Exposed
Vans has notified its customers of a potential fraud or identity theft following the cyberattack on the parent company VF Group. The report denoted the…
Ivanti urges customers to fix critical RCE flaw in Standalone Sentry
Ivanti urges customers to fix critical RCE flaw in Standalone Sentry solution Pierluigi Paganini March 21, 2024 Ivanti urges customers to address a critical remote…
Smuggling with JSON | HAHWUL
JSON은 YAML과 함께 자주 사용되는 포맷 중 하나입니다. K:V 형태의 단순한 구성이지만, JSON의 특성을 이용하면 데이터를 숨기고 Application의 잘못된 동작을 유도할 수 있습니다. 오늘은 Insignificant…
Pokémon Resets Users Password Following Hacking Attempts
The Pokémon Company has taken decisive action to safeguard its users by resetting passwords after detecting unauthorized hacking attempts. This move underscores the ongoing battle…
Application-Layer Loop DoS Attack – 300,000 Online Systems At Risk
Denial-of-service (DoS) attacks are usually exploited by hackers to interrupt regular network and website functioning, with motives of making money or for political reasons or…
Attackers are exploiting JetBrains TeamCity flaw to deliver a variety of malware
Attackers are exploiting the recently patched JetBrains TeamCity auth bypass vulnerability (CVE-2024-27198) to deliver ransomware, cryptominers and remote access trojans (RATs), according to Trend Micro…
U.S. Sanctions Russians Behind ‘Doppelganger’ Cyber Influence Campaign
Mar 21, 2024NewsroomNational Security / Data Privacy The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) on Wednesday announced sanctions against two 46-year-old Russian…
CCS holding firm on G-Cloud 14 insurance requirements for prospective Lot 4 suppliers
The Crown Commercial Service (CCS) is refusing to extend its decision to revise down the amount of insurance cover required by prospective G-Cloud 14 suppliers…