Articles
433 articles, newest first.
VMware has fixed a high-severity privilege escalation flaw in Workstation that allows attackers to delete arbitrary files. The issue was reported by Cirosec and updates are available to remedy the vulnerability.
Critical vulnerability (CVE-2023-22501) in Jira Service Management Server and Data Center, its impact, and how to fix it with the latest updates from Atlassian.
A recent data breach at PeopleConnect, the owners of TruthFinder and Instant Checkmate background check services. Over 20 million customer records were leaked in a 2019 backup database.
Tallahassee Memorial HealthCare Hospital has suffered a cyberattack, forcing it to take its IT systems offline and cancel non-emergency procedures. Patients have been diverted to other hospitals, and the attack is being investigated as a potential ransomware attack. Get the latest updates on this…
Vice Media data breach of personal and financial information of over 1,700 individuals. Read on for details and remediation efforts.
A zero-day vulnerability in Fortra's GoAnywhere MFT managed file transfer application is being actively exploited in the wild. Security researchers have warned of over 1,000 on-premise instances publicly accessible on the internet. No patch is currently available, but Fortra has released workarou…
A security vulnerability in Binwalk, a popular Linux command-line tool used for analyzing and extracting firmware images, could lead to remote code execution. The path traversal issue is caused by a failed attempt to mitigate risk in the Professional File System extractor plugin. The vulnerabilit…
A subsidiary of the Dublin-based financial technology and trading firm ION Group, ION Cleared Derivatives, has been hit by a cyberattack that has disrupted
F5 has issued a warning about a high-severity format string vulnerability in BIG-IP. An authorized attacker may cause a denial-of-service or execute arbitrary code. Versions of BIG-IP from 13.1.5 to 17.0.0 are vulnerable. Protect your system by checking if your product is affected and using iHeal…
Explore the potential of quantum-safe cryptography and quantum cryptography as enhanced solutions for secure communication and data protection. The article covers the technology behind these cryptographic methods, their potential for eliminating ransomware attacks, and their role in ensuring data…
Explore the pros and cons of both information security specialization and generalization, so you can make an informed decision about what is suitable for your career.
Penetration testing is a crucial aspect of system security, but it's not always easy to know where to start or how to ensure that you're testing all the right areas.
What are all those colored security teams and all those colored hacker hats? What is the difference between them and why do we need them?
By leveraging the power of machine learning algorithms, businesses can gain valuable insights into potential security threats and take proactive measures to protect their sensitive data.
Ask yourself the following questions before you even start thinking of executing a penetration test in your organization.
IoT devices introduce new security risks, as these devices may be vulnerable to multiple cyber threats. This is a simple guide to secure your IoT devices.
The top qualities of a successful CISO to enable them to perform their roles and protect their organization's data and systems.
Understand and reduce the possible entry points an attacker may try to exploit to gain access to systems and information.