Cozy Bear hijacks SME Microsoft 365 tenants in latest campaign
03
Aug
2023

Cozy Bear hijacks SME Microsoft 365 tenants in latest campaign

A new campaign of social engineering activity targeting organisations of interest to Russian intelligence has been observed in the wild,…

India mandates licensing for laptop, tablet imports
03
Aug
2023

India mandates licensing for laptop, tablet imports – Hardware

India will impose a licensing requirement for imports of laptops, tablets and personal computers with immediate effect, a move that…

[tl;dr sec] #193 - ATT&CK for AI and SaaS, GitHub Actions Goat, Finding Bugs in Web App Routes
03
Aug
2023

[tl;dr sec] #193 – ATT&CK for AI and SaaS, GitHub Actions Goat, Finding Bugs in Web App Routes

I hope you’ve been doing well! Hack Week This week we had people fly in from all over the world…

Map
03
Aug
2023

FBI, CISA, and NSA reveal top exploited vulnerabilities of 2022

In collaboration with CISA, the NSA, and the FBI, Five Eyes cybersecurity authorities have issued today a list of the…

03
Aug
2023

Qualys unveils first-party software risk management solution

The Qualys Cloud Platform now includes new capabilities for assessing risks in first-party applications. Customers can “bring their own” assessment…

Microsoft says Russia-linked hackers behind dozens of Teams phishing attacks
03
Aug
2023

Microsoft says Russia-linked hackers behind dozens of Teams phishing attacks – Security

A Russian government-linked hacking group took aim at dozens of global organisations with a campaign to steal login credentials by…

ICS Cybersecurity Conference
03
Aug
2023

Dozens of RCE Vulnerabilities Impact Milesight Industrial Router

Dozens of vulnerabilities impacting the Milesight UR32L industrial router could be exploited to execute arbitrary code or commands, Cisco’s Talos…

Penetration Testing
03
Aug
2023

A Penetration Testing Buyer’s Guide for IT Security Teams

The frequency and complexity of cyber threats are constantly evolving. At the same time, organizations are now collecting sensitive data…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
03
Aug
2023

Decommissioned Medical Infusion Pumps Expose Wi-Fi Configuration Data

Most medical infusion pumps sold via secondary market sources still contain Wi-Fi configuration settings from the original organization that deployed…

03
Aug
2023

Lineaje BOMbots remediate security issues using generative AI

Lineaje unveiled BOMbots, AI-based automation bots that deliver optimized recommendations and remediations across the entire supply chain. These AI-based automation…

Cloud Security Risks
03
Aug
2023

These Are the Top Five Cloud Security Risks, Qualys Says

Cloud security specialist Qualys has provided its view of the top five cloud security risks, drawing insights and data from…

OWASP Top 10 for LLM applications is out!Security Affairs
03
Aug
2023

OWASP Top 10 for LLM applications is out!Security Affairs

OWASP released the OWASP Top 10 for LLM (Large Language Model) Applications project, which provides a list of the top…