Critical vulnerability discovered in Bitbucket Server and Data Center
This vulnerability could allow remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request.
TheCISO
Published items (166)
Black Hat USA 2022: Are Cybersecurity Tool Standards on the Way?
One of the biggest challenges cybersecurity teams face is to integrate data from the various tools they use to protect their organizations. Enter OCSF.
Password Management LastPass Breached, Source Code Stolen
Password management company LastPass disclosed a data breach that led to the disclosure of some portions of its source code to the attacker.
United States increases Cybersecurity funding to address increasingly pervasive cyber-attacks
The House of Representatives finished marking up a dozen spending bills for fiscal 2023 that would altogether provide at least $15.6 billion for cybersecurity efforts across federal departments and agencies.
Half of Twitter’s Workers Have Access to Its Code And User Confidential Data
Twitter's former head of security accused the social media company and its executives of "extensive legal violations."
Microsoft joins hands with Kaspersky for cyber threat intelligence
Microsoft partners with Kaspersky for cyber threat intelligence, with access to Kaspersky TI through Microsoft Sentinel to empower enterprises with the latest insights to counter cyberattacks.
Hackers Demand 10 Million Dollars From a Paris Hospital As Ransom
The CHSF Hospital Centre in Corbeil-Essonnes, southeast of Paris, is the new recent victim of hackers.
Hackers Target Greek Natural Gas Operator
The Ragnar Locker ransomware gang has claimed responsibility for an attack on Greece's national gas system operator (DESFA).
Palo Alto PAN-OS Flaw Added to CISA’s “Known Exploited Vulnerabilities Catalog”
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw impacting Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog.
Data Breaches Reach All-Time High
According to a new IBM security report, the global average cost of data breaches reached $4.35 million in 2022 which is an all time high, following the cost of $4.24 million in 2021.
Cyberattack Crashes Israeli Government Websites
Users attempting to enter sites with gov.il extensions were unable to for at least an hour, before the sites slowly began to come back online.
Email Which Claims to Come from Saudi Aramco Delivers Malware
The email pretends to come from Saudi Aramco, a Saudi Arabian public petroleum and natural gas company, and one of the largest companies in the world by revenue.
Retailer Blames Third-Party for the Data Breach of More than 100,000 Payment Cards
Beauty product retailer Acro revealed that customers of two of its websites were impacted, exposing more than 100,000 payment cards
Developers Accidentally Turned Off CSRF Protection in Popular PHP Framework
Developers of the Symfony PHP framework have reversed a recent change that inadvertently turned off protection against CSRF attacks.
Actor’s Twitter Account Hacked and Used to Spam on NFT Giveaways
On Thursday a verified twitter profile of Siobhan McSweeney, a well known Irish actor, was hacked and was used to spam on NFT giveaways.
515,000 People Affected By Red Cross Data Breach
Over 515,000 people are affected by the Red Cross data breach incident. The ICRC has no information on who carried out the attack.
CISCO Recently Patched Critical Vulnerabilities
Cisco has patched a pair of vulnerabilities in its telco-focused Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS software, including a critical flaw that presented a remote code execution risk.
IT Company Fined for Massive Data Breach of Voters Information
The company had failed to notify the personal data breach to the data protection commissioner within the deadline stipulated by law. Nor had it informed victims of the breach that they had been affected.