Application Security
A 19 Year Old Hacker Received $4,500 Bug Bounty for an Easy-To-Exploit Vulnerability
TheCISO -
A high impact privacy bug was found in Facebook's Android application by a young bug bounty hunter. The 19 year old hacker received a...
A List of Tools to Help you Detect the Log4j Vulnerability
How can you detect the Log4j zero day vulnerability (known as Log4shell)? Here’s a list of FREE Log4j vulnerability scanner tools.
Amazon Inspector and AWS
The Amazon...
Massive Internet Scans and Log4j Exploit Attempts
TheCISO -
It is clear that the Log4j vulnerability is one of the most serious vulnerabilities in recent years. Many organizations have noticed a surge in...
How to Secure Your Zoom Meetings
Increasingly more people are remote working and many are using the videoconferencing platforms for meetings and training. There is a range of virtual conference...
Apple sues company known for hacking iPhones
Apple sues company known for hacking iPhones on behalf of governments. An Israeli firm called NSO Group, provided software to government agencies and law...
New Azure AD Bug Allows Attackers Brute-Force Passwords
An unpatched security weakness in Azure Active Directory might be leveraged by attackers to conduct undetected brute-force attacks, according to security researchers.
SecureWorks says...
Microsoft Released Mitigations on Recently Discovered Attack Method
TheCISO -
Microsoft has released mitigations for the new PetitPotam NTLM relay attack that allows taking over a domain controller or other Windows servers.
PetitPotam is a...
Top Threats for WordPress Sites in 2020
Security firm "Wordfence" published a new report from data gathered from its 4 million customers that have its software installed.
The report identified three major...
Apple iOS 14 Introduces “BlastDoor” to Prevent Execution of Malicious Code
TheCISO -
BlastDoor works by parsing all the data contained in an iMessage in a secure sandbox, isolated from the rest of the operating system. By...
Famous mobile apps are spying on you!
TheCISO -
During the last few weeks there have been several occasions where famous and widely used mobile applications have been caught on spying on your...
iPhones Crashing From Simple Text Messages
TheCISO -
The latest Apple mobile OS version iOS 13.4.1 has a text bomb bug that forces the device (Mac, Apple Watch, iPhone, or iPad) to...
DevSecOps: Why You Should Put “Sec” in DevOps.
In a short period of time, a span of less than a decade the IT infrastructures have undergone huge changes. We see more shared...
