Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack
Jun 22, 2023Ravie LakshmananSupply Chain / Software Security Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study…
Jun 22, 2023Ravie LakshmananSupply Chain / Software Security Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study…
Anti-malware vendor Symantec is warning that a China-linked hacking group flagged as APT15 is targeting foreign affairs ministries in the Americas with a new backdoor…
Norton parent firm, Gen Digital, was the victim of a ransomware attack that exploited the recently disclosed MOVEit zero-day vulnerability. Gen Digital Inc. (formerly Symantec Corporation and NortonLifeLock) is…
The vCISO Directory comes to answer the increasing need of SMBs to manage their cybersecurity and helps them find and engage with the right vendor.…
Jun 22, 2023The Hacker News Losing sleep over Generative-AI apps? You’re not alone or wrong. According to the Astrix Security Research Group, mid size organizations…
Researchers have discovered a modified version of Mallox ransomware that now appends the “.malox” file extension instead of the previous “.mallox” extension. Unlike the previous…
The industry’s first-ever directory of virtual CISO (vCISO) service providers has gone live. This list of vCISO providers means that SMBs can tap the expertise…
The UK government’s public cloud-first policy has undergone its first major update in a decade, with the guidance now urging central government departments to “challenge…
The PBI data breach has put California Public Employees’ Retirement System (CalPERS) on alert. PBI, a third party vendor for California Public Employees’ Retirement System…
In recent years there’s been a rise in “API Abuse” attacks, which includes detrimental automated behaviors such as malicious bots, account takeover (ATO), credential stuffing,…
A security researcher has published proof-of-concept (PoC) code targeting a recently patched high-severity vulnerability in the Cisco AnyConnect Secure Mobility Client and Secure Client for…
Students and staff members at the University of Manchester, which was hit by a cyber attack earlier in June, are receiving emails from the threat…