Apple Announces New Security Features
Apple has announced the introduction of three new advanced security features focused on protecting against threats to user data in the cloud.
Articles
News
433 articles, newest first.
Top 10 CI/CD Security Risks Guideline From OWASP
A list compiled on the basis of extensive research and analysis to help you protect your CI/CD ecosystem.
What Is The Difference Between GWAPT and OSWE Penetration Testing Certifications
GWAPT and OSWE are among the top certifications in security focused on penetration testers. Which would you choose to advance your career?
Rackspace Hosted Exchange Hit By Ransomware
Rackspace's hosted Microsoft Exchange environments were affected by a "security incident" which has knocked out email services to their customers.
Most Organizations Still Vulnerable To The Log4j Vulnerability
According to the data collected from over 500 million tests, 72% of organizations remain vulnerable to the Log4Shell vulnerability
Pentagon Supply Chain Fall Short Of Meeting Cybersecurity Requirements
A recent independent study revealed that a shocking 87% of federal contractors fall short of meeting the DFARS requirements.
APT Group Targeting Governments Worldwide
State-financed Chinese hackers have launched spear phishing campaigns to launch against international governments, academic, and research organizations.
WhatsApp Data Breach: 500 million Phone Numbers On Sale
A threat actor is claiming that is selling almost 500 million WhatsApp user phone numbers through a hacking community forum.
Interpol Seizes Over $129 Million and Arrests Almost 1000 Suspects
In an operation lasting over five months, from the 28th of June to the 23rd of November, Interpol arrested almost 1000 suspects and seized 129 million.
“OK Google”, Patch A New Zero-Day Vulnerability
Yet another Chrome "zero-day" vulnerability was patched by Google, the 8th for 2022.
Pro-Russian Group Attacked The EU Parliament Website
The website of EUs Parliament was inaccessible for hours after a distributed denial-of-service (DDoS) attack by "Pro-Kremlin" attackers.
More Than 50 Million Passwords Stolen By Russian Cybercrime Groups
Russian-speaking groups distributing info-stealing malware under the stealer-as-a-service model infecting thousands of devices.
CSRF Vulnerability Discovered in Plesk API
In Plesk versions starting from Plesk 17.8 attacker can execute commands and/or alter settings including the change of the admin's password.
Google Pixel Phone Lock Bypass
The vulnerability could allow an attacker to bypass lock-screen protections such as fingerprint or PIN authentication and obtain physical access to a target device.
What is a Vishing Attack?
Social engineering attacks use the "human loophole" to get around security controls. Instead of hacking your accounts to steal your identity, they hack you.
Critical Vulnerabilities Affecting Citrix Gateway and ADC
Critical vulnerabilities have been discovered in Citrix Gateway and Citrix ADC which can allow an attacker to gain unauthorized access, perform remote desktop takeover and bypass user login brute force protection.
Public Exploit is Available for NSX-V, VMware Urges Customers to Upgrade
VMware warns that an exploit has been made publicly available, and urges its customers to upgrade to the latest release.
Security Professionals, BEWARE of Fake PoCs
Researchers showed that fake Proof-of-Concepts (PoC) are targeting the security community, trying to plant malware and open backdoors to systems.