Ransomware gang exploiting unpatched Veeam backup products
Researchers at WithSecure have issued an alert after uncovering evidence that a notorious cyber criminal gang is exploiting a recently disclosed vulnerability in Veeam Backup…
Latest Cybersecurity News — Page 5788
View all →
ALPHV Ransomware Group Gets Access To 1.5 Million Files
In the latest development in the AKPK Malaysia data breach, ransomware attack group BlackCat akaALPHV has claimed responsibility for the attack. Malaysia’s Agensi Kaunseling dan…
Kerala Cyber Xtractors Launches Attack
The Kerala Cyber Xtractors hacker group allegedly attacked the Malaysian Central Bank. According to reports, the group announced its plans to target Indonesian organizations almost…
Bug Bytes #197 – In the Clouds
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps…
Google Authenticator updated, finally allows syncing of 2FA codes
Google has updated Google Authenticator, its mobile authenticator app for delivering time-based one-time authentication codes, and now allows users to sync (effectively: back up) their…
UK government introduces Digital Markets Bill to Parliament
The UK government has published a draft of its Digital Markets, Competition and Consumers Bill (DMCCB), which aims to establish a new regulator to challenge…
Securing the Supply Chain by Working With Ethical Hackers
At HackerOne’s recent Security@ global cybersecurity conference, three HackerOne experts—CTO and Co-founder Alex Rice, Senior Security Technologist Kayla Underkoffler, and Security Engineer Chris Dickens—presented practical…
Chinese hackers use new Linux malware variants for espionage
Hackers are deploying new Linux malware variants in cyberespionage attacks, such as a new PingPull variant and a previously undocumented backdoor tracked as ‘Sword2033.’ PingPull…
Carolin Solskär answers Detectify Crowdsource FAQs
In the summertime, I shared my thoughts on how Detectify Crowdsource is not your average bug bounty program. Through this, we got some questions from…
Sophos’ MDR service’s customer base grows 33% in first 6 months since launching new capabilities
At RSA Conference 2023, Sophos announced that its vendor-agnostic Managed Detection and Response (MDR) service has grown its customer base by 33% in the first…
Insecure Default Configuration Exposes Servers to RCE Attacks
Apr 26, 2023Ravie LakshmananServer Security / Vulnerability The maintainers of the Apache Superset open source data visualization software have released fixes to plug an insecure…
Google researchers identify hole in Intel TDX
Google’s Project Zero and cloud security teams’ nine-month assessment of the security of the Intel Trust Domain Extension (TDX) has identified a number of areas…