First Ever OWASP “Top 10 Non-Human Identities (NHI)” Released
The Open Worldwide Application Security Project’s (OWASP) released the first “Non-Human Identities (NHI) Top 10 used to provide authorization to software entities such as applications,…
Month: January 2025
Tech Trends Shaping 2025’s Altcoin Season
Prepare for the 2025 altcoin season: experts predict rising interest in altcoins like WorldCoin, driven by Web3, blockchain, and metaverse innovations. As experts predict 2025…
4 Reasons Your SaaS Attack Surface Can No Longer be Ignored
What do identity risks, data security risks and third-party risks all have in common? They are all made much worse by SaaS sprawl. Every new…
Generating customer experience at NatWest Bank
Thank you for joining! Access your Pro+ Content below. 14 January 2025 Generating customer experience at NatWest Bank Share this item with your network: In…
Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners
Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners Pierluigi Paganini January 14, 2025 A critical vulnerability in Aviatrix Controller is actively…
Zero-Day Vulnerability in PDF Files Leaking NTLM Data in Adobe & Foxit Reader
Cybersecurity researchers at EXPMON have uncovered an intriguing “zero-day behavior” in PDF samples that could potentially be exploited by attackers to leak sensitive NTLM authentication…
Hackers Attacking Internet Connected Fortinet Firewalls Using Zero-Day Vulnerability
A widespread campaign targeting Fortinet FortiGate firewall devices with exposed management interfaces on the public internet. The attacks, observed by Arctic Wolf between November and…
Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces
Jan 14, 2025Ravie LakshmananVulnerability / Network Security Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management…
Developing AI datacentres: Has the UK government got what it takes?
Debate is raging about whether the UK government’s push to grow the number of homegrown datacentres with capabilities to host compute-intensive artificial intelligence (AI) will…
Google OAuth “Sign in with Google” Vulnerability Exposes Millions of Accounts
A critical vulnerability in Google’s “Sign in with Google” authentication flow is putting millions of Americans at risk of data theft, particularly those who have…
Google’s “Sign in with Google” Flaw Exposes Millions of Users’ Details
A critical flaw in Google’s “Sign in with Google” authentication system has left millions of Americans vulnerable to potential data theft. This vulnerability mainly affects…
Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions
Jan 14, 2025Ravie LakshmananCryptocurrency / Online Scam The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion…