Sourcegraph Discloses Data Breach Following Access Token Leak
Code search and navigation platform Sourcegraph on Thursday announced that it has experienced a data breach after an engineer accidentally leaked an admin access token.…
Category: SecurityWeek
Over $1 Million Offered at New Pwn2Own Automotive Hacking Contest
The Zero Day Initiative (ZDI) this week announced that it will be offering more than $1 million in cash and prizes at Pwn2Own Automotive, the…
Energy Department Offering $9M in Cybersecurity Competition for Small Electric Utilities
The US Department of Energy on Wednesday announced a competition that can help smaller electric utilities obtain funding and technical assistance for improving their cybersecurity…
Vulnerability in WordPress Migration Plugin Exposes Websites to Attacks
A vulnerability in several extensions for the All-in-One WP Migration plugin potentially exposes WordPress websites to attacks leading to sensitive information disclosure. With more than…
Apple Preparing iPhone 14 Pro Phones for 2024 Security Research Device Program
Apple on Wednesday announced that it is now accepting applications for the 2024 iPhone Security Research Device Program (SRDP). Intended for security researchers looking to…
Five Eyes Report: New Russian Malware Targeting Ukrainian Military Android Devices
Five Eyes agencies have issued a joint report on the malware used recently by Russian state-sponsored hackers to target Android devices belonging to the Ukrainian…
Splunk Patches High-Severity Flaws in Enterprise, IT Service Intelligence
Splunk on Wednesday announced patches for multiple high-severity vulnerabilities in Splunk Enterprise and IT Service Intelligence, including flaws in third-party packages. The most severe of…
Dangling DNS Used to Hijack Subdomains of Major Organizations
Researchers have abused dangling DNS records to hijack subdomains belonging to over a dozen major organizations, and they warn that thousands of entities are vulnerable…
Lawsuit Accuses University of Minnesota of Not Doing Enough to Prevent Data Breach
A lawsuit filed on behalf of a former student and former employee at the University of Minnesota accuses the university of not doing enough to…
‘Earth Estries’ Cyberespionage Group Targets Government, Tech Sectors
A cyberespionage group possibly linked to China has targeted government-related organizations and technology companies in various parts of the world. Trend Micro, which tracks it…
Healthcare Organizations Hit by Cyberattacks Last Year Reported Big Impact, Costs
Roughly 78% of the healthcare organizations in North America, South America, the APAC region, and Europe experienced a cyberattack over the past year, according to…
Recent Juniper Flaws Chained in Attacks Following PoC Exploit Publication
Threat actors have started exploiting four recently patched vulnerabilities in the J-Web component of Juniper Networks’ Junos OS after proof-of-concept (PoC) exploit code was published…