Information Security News Resources
A centralized way to consume your information security news, with a focus on web application security. Save time and effort, because keeping up-to-date shouldn’t be…
Latest Cybersecurity News — Page 5856
View all →
U.S Federal Agency Hacked Due to Vulnerability in IIS Server
A joint operation conducted by DHS, FCEB, and CISA Identified multiple attempts of a cyber attack on the U.S. Government IIS Server by exploiting a…
New infosec products of the week: March 17, 2023
Here’s a look at the most interesting products from the past week, featuring releases from Atakama, Elevate Security, Hornetsecurity, HYPR, and ReversingLabs. Hornetsecurity VM Backup…
Google Uncovers 18 Severe Security Vulnerabilities in Samsung Exynos Chips
Mar 17, 2023Ravie LakshmananMobile Security / Firmware Google is calling attention to a set of severe security flaws in Samsung’s Exynos chips, some of which…
Onex Data Exposed, Linked To GoAnywhere Security Incident
Yet another organization has been compromised following Forta’s GoAnywhere hack. After Community Health Systems, Hatch Bank, Canada’s asset managing firm Onex, has confirmed being impacted…
Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI – Assetnote
At Assetnote, we often audit enterprise software source code to discover pre-authentication vulnerabilities. Yellowfin BI had significance to us because it is a popular analytics…
How healthcare CISOs can automate cloud security controls
Cloud environments provide many benefits, primarily involving their ease of scalability and resilience. Those qualities exist because of automation and the easy and straightforward way…
Winter Vivern APT Group Targeting Indian, Lithuanian, Slovakian, and Vatican Officials
The advanced persistent threat known as Winter Vivern has been linked to campaigns targeting government officials in India, Lithuania, Slovakia, and the Vatican since 2021.…
Independent Living Systems Data Breach: 4.2M People at Risk
Miami-based healthcare administrator and managed care solutions provider Independent Living Systems (ILS) suffered a massive data breach last July, which impacted over 4.2 million individuals.…
Your Java builds might break starting January 13th (if you haven’t yet switched repo access to HTTPS) – Alphabot Security
Summary This blog post is a reminder that you should make sure that all your builds in the Java ecosystem access the artifact repositories (e.g.…
Microsoft shares script to fix WinRE BitLocker bypass flaw
Microsoft has released a script to make it easier to patch a BitLocker bypass security vulnerability in the Windows Recovery Environment (WinRE). This PowerShell script…
Hackers shifting cybercrime focus towards smart phones and tablets
All these days, we have seen cyber criminals infiltrating networks and taking down computers. But after the spread of the Covid-19 pandemic, the focus of…