Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

Supply Chain Startup Chainguard Scores $61 Million Series B

Chainguard, a high-flying security startup founded by a team of former Google software engineers, has banked $61 million in new…

VMware Workspace Flaw Let Attacker Redirect User to Malicious Source
01
Nov
2023

VMware Workspace Flaw Let Attacker Redirect to Malicious Source

An open redirect vulnerability in the VMware Workspace ONE UEM console has been identified as CVE-2023-20886, which has a CVSS score…

Mozi Botnet Takedown: Who Killed the IoT Zombie Botnet?
01
Nov
2023

Who Killed the IoT Zombie Botnet?

The cybersecurity researchers have developed theories regarding who might have taken down the Mozi botnet: it could have been China,…

Bank of International Settlement sets up channel secure from quantum breach
01
Nov
2023

Banking should start testing out quantum ideas

Banks should be setting up a quantum computing taskforce, a report from UK Finance has concluded. The Identifying and seizing…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks

An Iranian espionage group has been caught using a new malware framework in a recent spate of cyberattacks, according to…

Hackers Abuse Google Search Ads
01
Nov
2023

Hackers Weaponize HWP Documents to Attack Defense sectors

HWP documents are primarily associated with the Hangul Word Processor software used in South Korea.  Hackers may opt for HWP…

Mass Exploitation of 'Citrix Bleed' Vulnerability Underway
01
Nov
2023

Mass Exploitation of ‘Citrix Bleed’ Vulnerability Underway

Thousands of Citrix NetScaler ADC and Gateway instances remain unpatched against a critical vulnerability that is being widely exploited, security…

Kubernetes Security Flaw Let Attackers escalate to admin privileges
01
Nov
2023

Kubernetes Security Flaw Let Attacks Escalate Admin Privileges

A new privilege escalation vulnerability has been discovered in Kubernetes, which allows threat actors to gain administrative privileges on affected…

Hackers Abuse Google Search Ads
01
Nov
2023

F5 Warns of Attacks Targeting BIG-IP SQL injection vulnerability

F5 Networks has issued a security alert about a severe vulnerability in its BIG-IP Configuration utility, identified as CVE-2023-46748.  This…

What secure coding practices mean to modern cyber security
01
Nov
2023

Incident response planning is vulnerable to legacy thinking

Part of the challenge is demonstrated in the question here. Our legacy thinking may lead us into thinking about incident…

NodeStealer Malware and Malvertising Campaigns
01
Nov
2023

Malvertising Campaigns Exploits Ads With NodeStealer Malware

In a cunning ploy to compromise Windows PCs, hackers have turned to Facebook ads featuring provocative images to entice unsuspecting…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
01
Nov
2023

Chrome 119 Patches 15 Vulnerabilities

Google on Tuesday announced the release of Chrome 119 to the stable channel with patches for 15 vulnerabilities, including 13…