Cisco discloses XSS zero-day flaw in server management tool
Cisco disclosed today a zero-day vulnerability in the company’s Prime Collaboration Deployment (PCD) software that can be exploited for cross-site scripting attacks. This server management…
Latest Cybersecurity News — Page 6445
View all →
Tencent QQ users hacked in mysterious malware attack, says ESET
A Chinese APT hacking group known as ‘Evasive Panda’ is linked to a mysterious attack that distributed the MsgBot malware as part of an automatic update…
The Cybersecurity Talent Gap – Where do We Go from Here?
By , VP of Human Resources and Talent Acquisition, Currently there are , yet there are still upwards of 700,000 positions in the field that…
How Elastic Attracts and Retains Top Hackers Without Offering the Highest Bounties
At HackerOne’s 2021 Security@ conference, we spoke with Douglas Day, an experienced ethical hacker and senior product security engineer who has managed Elastic’s bug bounty…
Microsoft removes LSA Protection from Windows settings to fix bug
Microsoft has fixed a known issue triggering Windows Security warnings that Local Security Authority (LSA) Protection is off by removing the feature’s UI from settings.…
Meet the Team: Johan Svensson – Growing with Detectify
Johan Svensson joined Detectify as an intern in March 2017, and was hired full-time in October that same year. Now he works as a senior…
Google disrupts the CryptBot info-stealing malware operation
Google is taking down malware infrastructure linked to the Cryptbot info stealer after suing those using it to infect Google Chrome users and steal their data. The…
Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks
Apr 26, 2023Ravie LakshmananLinux / Cyber Threat The Chinese nation-state group dubbed Alloy Taurus is using a Linux variant of a backdoor called PingPull as…
Microsoft rolls out Phone Link for iOS to all Windows 11 users
Microsoft is rolling out Phone Link for iOS to all Windows 11 and iPhone users, with the rollout expected to complete by mid-May. The Phone…
Application Programming Interface (API) testing for PCI DSS compliance
[ This article was originally published here ] This is the fourth blog in the series focused on PCI DSS, written by an AT&T Cybersecurity…
Bug Bounty Platforms [Best Choices For a Bug Bounty Program]
What Is a Bug Bounty Platform? A bug bounty platform is software that deploys and tracks a bug bounty program. A bug bounty is a…
Thousands of Apache Superset servers exposed to RCE attacks
Apache Superset is vulnerable to authentication bypass and remote code execution at default configurations, allowing attackers to potentially access and modify data, harvest credentials, and…