Atlassian issues urgent Confluence patch – Security
Atlassian is warning users of out-of-date Confluence data centre and server environments that they need to update to a current version to patch a critical-rated…
Latest Cybersecurity News — Page 5521
View all →
GitHub rotates keys to mitigate impact of credential-exposing flaw
GitHub rotated keys potentially exposed by a vulnerability patched in December that could let attackers access credentials within production containers via environment variables. This unsafe reflection vulnerability…
Synopsys to buy engineering software firm Ansys – Strategy
Chip design software maker Synopsys will buy Ansys in a US$35 billion ($53 billion) cash-and-stock deal, snapping up the maker of software used in creating…
MacOS info-stealers quickly evolve to evade XProtect detection
Multiple information stealers for the macOS platform have demonstrated the capability to evade detection even when security companies follow and report about new variants frequently.…
WooliesX reorganises engineering under Agile structure tweak – Strategy – Training & Development – Software
WooliesX, the online and digital arm of Woolworths, has tweaked its Agile organisational structure, with some of the early changes apparent in its software engineering…
Reversing and Tooling a Signed Request Hash in Obfuscated JavaScript
I was hacking on a bug bounty program recently and discovered that the website is signing every request, preventing you from modifying the URL, including…
Citrix warns of new Netscaler zero-days exploited in attacks
Citrix urged customers on Tuesday to immediately patch Netscaler ADC and Gateway appliances exposed online against two actively exploited zero-day vulnerabilities. The two zero-days (tracked…
Medion fined for SIM-swap code breaches – Telco/ISP
Medion Australia has paid a penalty of nearly $260,000 for not complying with customer identification rules. Announcing the $259,440 penalty, the Australian Communications and Media…
Google fixes first actively exploited Chrome zero-day of 2024
Google has released security updates to fix the first Chrome zero-day vulnerability exploited in the wild since the start of the year. “Google is aware…
Inferno Drainer Phishing Nets Scammers $80M from Crypto Wallets
Group-IB Global Pvt. Ltd. has revealed shocking details on Inferno Drainer, a phishing operation targeting cryptocurrency wallet providers. The scam, involving the deployment of a…
VMware fixed a critical flaw in Aria Automation. Patch it now!
VMware fixed a critical flaw in Aria Automation. Patch it now! Pierluigi Paganini January 16, 2024 VMware warns customers of a critical vulnerability impacting its…
Androxgh0st malware botnet steals AWS, Microsoft credentials
CISA and the FBI warned today that threat actors using Androxgh0st malware are building a botnet focused on cloud credential theft and using the stolen…