[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CISA Issues UPS Warning
Agency warns of attacks on internet-connected uninterruptible power supply devices
> Cyber-Attack on California Healthcare Organization
Ransomware gang claims responsibility for attack on Partnership HealthPlan
> Abusing Managed Identities
Abusing Managed Identities
> New Version of PCI DSS Designed to Tackle Emerging Payment Threats
v4.0 of PCI DSS includes a number of changes, including those designed to enable organizations to use innovative methods to tackle emerging threats
> Australian Government to Invest $9.9bn in Cyber
Country seeks to triple cyber capabilities of its digital intelligence agency, ASD
> Towards Practical Security Optimizations for Binaries
To be thus is nothing, but to be safely thus. (Macbeth: 3.1) It’s not enough that compilers generate efficient code, they must also generate safe code. Despite the extensive testing and correctness certification that goes into developing compilers and their optimization passes, they may inadvertentl...
> No Patch Available Yet for Critical SpringShell Bug
Vulnerability has echoes of infamous Struts and Log4Shell vulnerabilities
> Viasat: Denial of Service Attack Impacted Tens of Thousands
Provider claims attackers first compromised VPN appliance
> Anonymous Blob Access
Finding and accessing files stored in Azure Storage Accounts without authentication.
> Global Police Arrest 65 in Multimillion-Dollar BEC Bust
FBI-led operation lasted three months
> FBI Investigating More than 100 Ransomware Variants
Cyber Division’s assistant director says impact of ransomware has “grown to dangerous proportions”
> Flipper Zero - Initial Thoughts
After a bit of a delay my Flipper Zero finally arrived in the mail. If you are not familiar with Flipper Zero at all, check out the original Kickstarter page from a few years back. This is what the package looks like after opening. It contains the device, a USB cable, a quick start manual (mostly po...
> New Research Claims Biden's Disclosure Deadlines Are Unrealistic
New research shows organizations unprepared for strict new cyber incident reporting requirements
> Personal Data of 820,000 NYC Students Exposed
Grading system hack causes potentially historic breach of students’ personal data
> CVE-2022-27226: CSRF to RCE in iRZ Mobile Routers through 2022-03-16
Credits Vulnerability Discovery John Chris Mack Exploit Development Stephen Chavez Robert Willis Identification Default credentials were discovered on an iRZ Mobile Router login page. Utilizing root:root gave us access to the administrative functionality for the device. Having administrative access...
> Infosecurity Europe Unveils Keynote Speakers for 2022 Event
Day 1 will include a talk from Major General Tom Copinger-Symes CBE, director of strategy and military digitisation with UK Strategic Command
> A Third of UK Businesses Experience Cyber-Attacks at Least Once a Week
Around two in five businesses experienced breaches or cyber-attacks in the past 12 months
> Soft Deleted Blobs
Recovering and accessing files in private Storage Accounts that have been deleted.
> NCSC: Time to Rethink Russian Supply Chain Risks
Kremlin coercion and sanctions could impact Western customers
> Log4Shell Used in a Third of Malware Infections
Software supply chain attacks realize researchers' worst fears