Independent thinking. Informed defence.
Articles
463 articles, newest first.
A security researcher, Eaton Zveare, discovered a vulnerability in Toyota's Global Supplier Preparation Information Management System (GSPIMS) and was able to access sensitive data of thousands of suppliers and users worldwide. Toyota quickly addressed the issue and fixed the vulnerability.
Formbook family of malware spread via MalVirt loaders through malvertising attacks.
The Italian National Cybersecurity Agency and the France CERT have issued an alert about an ongoing ransomware campaign targeting VMware ESXi servers worldwide. Organizations are urged to apply security patches and prevent exploitation of the CVE-2021-21974 vulnerability
OpenAI has recently announced the release of AI Text Classifier, an AI-text detection tool designed to help users detect AI-generated texts with 26% precision. Read on to know more about the tool and its limitations
The maintainers of OpenSSH have released version 9.2 to address a pre-authentication double free vulnerability in the OpenSSH server (sshd). Learn about the vulnerability, its potential impact, and how to protect yourself
Protect your Redis server from the fast-spreading HeadCrab malware. Learn about the malicious botnet network, its annual profit, and how to secure your environment.
VMware has fixed a high-severity privilege escalation flaw in Workstation that allows attackers to delete arbitrary files. The issue was reported by Cirosec and updates are available to remedy the vulnerability.
Critical vulnerability (CVE-2023-22501) in Jira Service Management Server and Data Center, its impact, and how to fix it with the latest updates from Atlassian.
A recent data breach at PeopleConnect, the owners of TruthFinder and Instant Checkmate background check services. Over 20 million customer records were leaked in a 2019 backup database.
Tallahassee Memorial HealthCare Hospital has suffered a cyberattack, forcing it to take its IT systems offline and cancel non-emergency procedures. Patients have been diverted to other hospitals, and the attack is being investigated as a potential ransomware attack. Get the latest updates on this…
Vice Media data breach of personal and financial information of over 1,700 individuals. Read on for details and remediation efforts.
A zero-day vulnerability in Fortra's GoAnywhere MFT, later tracked as CVE-2023-0669, was exploited in the wild. Over 1,000 on-premise instances were publicly accessible. Fortra fixed it in version 7.1.2 in February 2023.
A security vulnerability in Binwalk, a popular Linux command-line tool used for analyzing and extracting firmware images, could lead to remote code execution. The path traversal issue is caused by a failed attempt to mitigate risk in the Professional File System extractor plugin. The vulnerabilit…
A subsidiary of the Dublin-based financial technology and trading firm ION Group, ION Cleared Derivatives, has been hit by a cyberattack that has disrupted
F5 has issued a warning about a high-severity format string vulnerability in BIG-IP. An authorized attacker may cause a denial-of-service or execute arbitrary code. Versions of BIG-IP from 13.1.5 to 17.0.0 are vulnerable. Protect your system by checking if your product is affected and using iHeal…
Explore the pros and cons of both information security specialization and generalization, so you can make an informed decision about what is suitable for your career.
Penetration testing is a crucial aspect of system security, but it's not always easy to know where to start or how to ensure that you're testing all the right areas.
What are all those colored security teams and all those colored hacker hats? What is the difference between them and why do we need them?