41 articles
Three new web application security risks climb up the OWASP top 10, the standard awareness document which represent a consensus about the most critical security risks to web applications.
Along with the many benefits of updating to microservices architecture, there are also new security challenges that organizations need to address.
Google announced the public preview of a tool which helps identify threats within virtual machines running on its Google Cloud infrastructure.
CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities.
A dependency confusion attack occurs when a software installer script is tricked into pulling malicious code file from a public repository instead of the intended file of the same name from an internal repository.
A huge increase of 142% of WordPress vulnerabilities in 2021 compare to 2020. Most of them exploitable.
Microsoft recommends that you install the latest security updates which will patch the critical flaw now.
A high impact privacy bug was found in Facebook's Android application by a young bug bounty hunter. The 19 year old hacker received a $4,500 bug bounty
How can you detect the Log4j zero day vulnerability (known as Log4shell)? Here's a list of FREE Log4j vulnerability scanner tools.
Many organizations have noticed a surge in internet scans to discover vulnerable systems and exploit attempts on them.
Zoom has around 300 million daily meeting participants! It also has security issues like "Zoom bombings" where uninvited guests may show up at meetings and another more "creepy" vulnerability which left millions of users exposed, which offered access to user's cameras and microphones.
Apple sues company known for hacking iPhones on behalf of governments. An Israeli firm called NSO Group, provided software to government agencies and law enforcement that enables them to hack iPhones and read the data on them, including messages and other communications.
An unpatched security weakness in Azure Active Directory might be leveraged by attackers to conduct undetected brute-force attacks, according to security researchers.
PetitPotam takes advantage of servers where the Active Directory Certificate Services (AD CS) is not configured with protections for NTLM
Security firm Wordfence released a report identifying the top security vulnerabilities and threats and common attacks against wordpress websites.
Apple introduces new security mechanism to iMessage, called BlastDoor. What does it do?
During the last few weeks there have been several occasions where famous and widely used mobile applications have been caught on spying on your device's
It is important to understand the need for security integration in the DevOps environment. Security belongs in the DevOps lifecycle.