Critical vulnerability discovered in Bitbucket Server and Data Center
This vulnerability could allow remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request.
TheCISO
Published items (166)
Black Hat USA 2022: Are Cybersecurity Tool Standards on the Way?
One of the biggest challenges cybersecurity teams face is to integrate data from the various tools they use to protect their organizations. Enter OCSF.
Read morePassword Management LastPass Breached, Source Code Stolen
Password management company LastPass disclosed a data breach that led to the disclosure of some portions of its source code to the attacker.
Read moreUnited States increases Cybersecurity funding to address increasingly pervasive cyber-attacks
The House of Representatives finished marking up a dozen spending bills for fiscal 2023 that would altogether provide at least $15.6 billion for cybersecurity efforts across federal departments and agencies.
Read moreHalf of Twitter’s Workers Have Access to Its Code And User Confidential Data
Twitter's former head of security accused the social media company and its executives of "extensive legal violations."
Read moreMicrosoft joins hands with Kaspersky for cyber threat intelligence
Microsoft partners with Kaspersky for cyber threat intelligence, with access to Kaspersky TI through Microsoft Sentinel to empower enterprises with the latest insights to counter cyberattacks.
Read moreHackers Demand 10 Million Dollars From a Paris Hospital As Ransom
The CHSF Hospital Centre in Corbeil-Essonnes, southeast of Paris, is the new recent victim of hackers.
Read moreHackers Target Greek Natural Gas Operator
The Ragnar Locker ransomware gang has claimed responsibility for an attack on Greece's national gas system operator (DESFA).
Read morePalo Alto PAN-OS Flaw Added to CISA’s “Known Exploited Vulnerabilities Catalog”
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw impacting Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog.
Read moreData Breaches Reach All-Time High
According to a new IBM security report, the global average cost of data breaches reached $4.35 million in 2022 which is an all time high, following the cost of $4.24 million in 2021.
Read moreCyberattack Crashes Israeli Government Websites
Users attempting to enter sites with gov.il extensions were unable to for at least an hour, before the sites slowly began to come back online.
Read moreEmail Which Claims to Come from Saudi Aramco Delivers Malware
The email pretends to come from Saudi Aramco, a Saudi Arabian public petroleum and natural gas company, and one of the largest companies in the world by revenue.
Read moreRetailer Blames Third-Party for the Data Breach of More than 100,000 Payment Cards
Beauty product retailer Acro revealed that customers of two of its websites were impacted, exposing more than 100,000 payment cards
Read moreDevelopers Accidentally Turned Off CSRF Protection in Popular PHP Framework
Developers of the Symfony PHP framework have reversed a recent change that inadvertently turned off protection against CSRF attacks.
Read moreActor’s Twitter Account Hacked and Used to Spam on NFT Giveaways
On Thursday a verified twitter profile of Siobhan McSweeney, a well known Irish actor, was hacked and was used to spam on NFT giveaways.
Read more515,000 People Affected By Red Cross Data Breach
Over 515,000 people are affected by the Red Cross data breach incident. The ICRC has no information on who carried out the attack.
Read moreCISCO Recently Patched Critical Vulnerabilities
Cisco has patched a pair of vulnerabilities in its telco-focused Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS software, including a critical flaw that presented a remote code execution risk.
Read moreIT Company Fined for Massive Data Breach of Voters Information
The company had failed to notify the personal data breach to the data protection commissioner within the deadline stipulated by law. Nor had it informed victims of the breach that they had been affected.
Read more