How Bug Bounties Help You Shift Left
For many organizations, the days when security acted as a final “check-in” are disappearing faster than the guacamole at a Super Bowl party. Nowadays, cloud,…
Author: Cybernoz
Newly added security tests, October 4, 2017: WordPress and Magento vulnerabilities
This week’s update brings more WordPress plugin vulnerabilities that Detectify now checks for as well as two Magento security tests. We have added: WordPress Authenticated…
Brightline breach hits at least 964,000 people, US records show
Following the Cl0p ransomware gang’s attacks that leveraged Fortra’s GoAnywhereMFT software tool, behavioral health provider Brightline informed customers about a data breach related to the…
Microsoft Patch Tuesday, May 2023 Edition – Krebs on Security
Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two…
Ransomware attack on MSI led to compromised Intel Boot Guard private keys
The leaked data after the ransomware attack on MSI includes private keys which could be used to bypass Intel Boot Guard On April 7, 2023…
Prove Your Worth: How to Measure Cybersecurity ROI and Impress Your Board
CISOs often struggle with proving ROI from security initiatives when trying to secure buy-in from the board and prioritize budget. A recent survey of security…
Fake system update drops Aurora stealer via Invalid Printer loader
Not all system updates mean well, and some will even trick you into installing malware. Malvertising seems to be enjoying a renaissance as of late,…
Magento security 101: How to secure your Magento site
Due to its popularity as an e-commerce platform, Magento is an attractive target for hacker attacks, but basic security precautions can go a long way.…
New dangerous ransomware encrypts itself and uses VPN flaws to encrypt network devices
Researchers in the field of information security have found a new strain of ransomware that has been given the name CACTUS and that infiltrates targeted…
Transparency Builds Trust | HackerOne
Someone called it a “breach,” and the world took notice. Here is the story. There is no trust without transparency. For us at HackerOne, it…
Microsoft May 2023 Patch Tuesday fixes 3 zero-days, 38 flaws
Today is Microsoft’s May 2023 Patch Tuesday, and security updates fix three zero-day vulnerabilities and a total of 38 flaws. Six vulnerabilities are classified as…
Is your Magento store vulnerable? Why it’s time to put security first
Magento is not only interesting for retailers – hackers like to target widely used platforms and the fact that online stores handle sensitive payment information…