The Problem of Permissions and Non-Human Identities
According to research from GitGuardian and CyberArk, 79% of IT decision-makers reported having experienced a secrets leak, up from 75% in the previous year’s report.…
Latest Cybersecurity News — Page 4015
View all →
Microsoft 365 Admin portal abused to send sextortion emails
The Microsoft 365 Admin Portal is being abused to send sextortion emails, making the messages appear trustworthy and bypassing email security platforms. Sextortion emails are…
Illegal Crypto Mining: How Businesses Can Prevent Themselves From Being ‘Cryptojacked’
The popularity of cryptocurrencies like Ethereum and Bitcoin surged during the pandemic era. What began as a niche, almost novelty form of payment in the…
Final report on Nats calls for improvements to contingency process
The major incident caused by the failure of the UK’s National Air Traffic Services (Nats) in August 2023 may be a very rare occurrence, but…
NCSC Warns Of Fraud Risks As Black Friday Approaches
As Black Friday approaches, shoppers eagerly anticipate major discounts and deals, hoping to snag a bargain. However, the surge in online shopping comes with a…
How our new engine framework helped address the critical CUPS vulnerability within the day
When a critical vulnerability in the printing system CUPS started raising alarms among security teams, Detectify had already entered war-room mode to address the situation.…
Apache HertzBeat Vulnerability Let Attackers Exfiltrate Sensitive Data
A recently discovered vulnerability in Apache HertzBeat, an open-source real-time monitoring tool, has raised concerns about potential data exfiltration. The security flaw, identified as CVE-2024-45791,…
Mozilla 0Din Warns of ChatGPT Sandbox Flaws Enabling Python Execution
Mozilla’s 0Din uncovers critical flaws in ChatGPT’s sandbox, allowing Python code execution and access to internal configurations. OpenAI has addressed only one of five issues.…
Fake Discount Sites Exploit Black Friday to Hijack Shopper Information
A new phishing campaign is targeting e-commerce shoppers in Europe and the United States with bogus pages that mimic legitimate brands with the goal of…
T-Mobile is one of the victims of the massive Chinese breach of telco firms
T-Mobile is one of the victims of the massive Chinese breach of telecom firms Pierluigi Paganini November 18, 2024 T-Mobile confirmed being a victim of…
Zohocorp ManageEngine ADAudit Plus Vulnerable To SQL Injection Attacks
Zohocorp’s ManageEngine has disclosed a critical vulnerability in its ADAudit Plus software during a significant cybersecurity development. It’s a popular tool used for Active Directory…
The Critical Role of a CEO in Bolstering Corporate Cybersecurity
In today’s digital age, where cyber threats are growing more sophisticated by the day, the role of a CEO in ensuring robust corporate cybersecurity cannot…