Offensive Threat Models Against the Supply Chain
In this talk, Tony discusses the economic and geopolitical impacts of supply chain attacks, a walkthrough of supply chain threat modeling from a manufacturer’s perspective,…
Latest Cybersecurity News — Page 6147
View all →
Google Analytics data transfer to U.S. brings $1 million fine to Swedish firms
The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY) has fined two companies with 12.3 million SEK (€1 million/$1.1 million) for using Google Analytics and…
EU judgment sinks Meta’s argument for targeted ads
In a move thought likely to widen scrutiny of big tech companies and online platforms, the Court of Justice of the European Union (CJEU) has…
MOVEit attack on Aon exposed data of staff at the Dublin AirportSecurity Affairs
Personal data of the personnel at the Dublin Airport was compromised due to a MOVEit attack on professional service provider Aon. Data of about 3000…
‘Political lethargy’ to blame for digital exclusion, says Lords
Government plans to be a “science and technology superpower” do not take into account the extent of digital exclusion in the UK, according to a…
Anonymous Sudan Targets Rapid Support Forces
While the ongoing war between Sudan Army (SA) and the paramilitary Rapid Support Forces (RSF) continues to escalate, hacker collective Anonymous Sudan seems to have…
Game On! Adding Privacy to Threat Modeling
Elevation of Privilege: Background Adam originally created Elevation of Privilege at Microsoft as a fun and low barrier to entry way to teach threat modeling…
Breaking it Down: What You Need to Know About Data Breaches
One of the most pressing cybersecurity concerns for organisations today is preventing the exfiltration of sensitive data. Even companies whose main focus is not digital…
ChatGPT’s Training Methods Challenged in Lawsuit
The lawsuit, brought forth by science fiction and horror author Paul Tremblay and novelist Mona Awad, accuses OpenAI of training ChatGPT on copyrighted books without…
Find GraphQL API vulnerabilities, with Burp Suite Professional | Blog
Gareth Heyes | 04 July 2023 at 13:00 UTC As a penetration tester, you need your tools to find the latest vulnerabilities. GraphQL APIs are…
Neo_Net runs eCrime campaign targeting clients of banks globallySecurity Affairs
A Mexican threat actor that goes online with the moniker Neo_Net is behind an Android malware campaign targeting banks worldwide. A joint study conducted by…
Coping with the ongoing chip crisis in the UK
China is set to put in place export restrictions, in a move that could seriously impact the global semiconductor sector. The Chinese Ministry of Commerce…