TheCISO

Published items (166)

Zero-Day Vulnerability Found in Fortra’s GoAnywhere MFT

A zero-day vulnerability in Fortra's GoAnywhere MFT managed file transfer application is being actively exploited in the wild. Security researchers have warned of over 1,000 on-premise instances publicly accessible on the internet. No patch is currently available, but Fortra has released workarou…

Binwalk Security Tool Vulnerable to Path Traversal Attack

A security vulnerability in Binwalk, a popular Linux command-line tool used for analyzing and extracting firmware images, could lead to remote code execution. The path traversal issue is caused by a failed attempt to mitigate risk in the Professional File System extractor plugin. The vulnerabilit…

Cyberattack Disrupts ION Group Transactions

A subsidiary of the Dublin-based financial technology and trading firm ION Group, ION Cleared Derivatives, has been hit by a cyberattack that has disrupted

F5 BIG-IP Vulnerability: A Threat to System Stability

F5 has issued a warning about a high-severity format string vulnerability in BIG-IP. An authorized attacker may cause a denial-of-service or execute arbitrary code. Versions of BIG-IP from 13.1.5 to 17.0.0 are vulnerable. Protect your system by checking if your product is affected and using iHeal…

Apple Announces New Security Features

Apple has announced the introduction of three new advanced security features focused on protecting against threats to user data in the cloud.

Google Pixel Phone Lock Bypass

The vulnerability could allow an attacker to bypass lock-screen protections such as fingerprint or PIN authentication and obtain physical access to a target device.

Critical Vulnerabilities Affecting Citrix Gateway and ADC

Critical vulnerabilities have been discovered in Citrix Gateway and Citrix ADC which can allow an attacker to gain unauthorized access, perform remote desktop takeover and bypass user login brute force protection.

Free Information Security Courses

Learning is a choice, you just pay in time and effort instead of money. Dive into free information security courses.