The growth is associated with using HTML attachments as a delivery method in credential phishing
Darktrace’s latest report analyses findings from the energy, retail and healthcare sectors
Trail of Bits is publicly disclosing four vulnerabilities that affect wolfSSL: CVE-2022-38152, CVE-2022-38153, CVE-2022-39173, and CVE-2022-42905. The four issues, which have CVSS scores ranging from medium to critical, can all result in a denial of service (DoS). These vulnerabilities have been dis...
The warning comes from Imperva's security researcher Ron Masas
War in Ukraine is making firms more anxious
This time last year, we wrote about the more than 190 Trail of Bits-authored pull requests that were merged into non-Trail of Bits repositories in 2021. In 2022, we continued that trend by having more than 400 pull requests merged into non-Trail of Bits repositories! Why is this significant? While w...
Social media firm claims its systems were not compromised
It's still unclear whether customer data has been compromised
Andrew A explains what you must check before giving Managed Service Providers (MSPs) the keys to your kingdom.
The group began operations as early as mid-2021, but its activity increased in mid-to-late 2022
The attack also affected IT financial industry solutions developer Bankdata
Le district scolaire de Des Moines a été victime d'une cyberattaque en janvier 2023. Près de 6 700 personnes ont été informées de l'incident et de la possible exposition de leurs données personnelles. Des mesures de sécurité ont été prises pour empêcher de futures attaques similaires. Les personnes...
The leaked files include some 120,000 files, with specific allegations of child abuse
Customer and employee data accounts for almost half all stolen data while credit cards and password see a decline
Known Issues
AuthPoint external identity does not sync users
Cannot configure a link aggregation interface to use both built-in and interface module 10G SFP ports (M590/M690)
Cannot fully uninstall the DNSWatchGO client through Group Policy Object (GPO)
HTTPS Proxy no longer works on a Firebox in B...
Veracode’s 2023 State of Software Security Report is focused on flaw introduction
Microsoft's January Patch Tuesday resolved over 100 CVEs, including an actively exploited zero day
There is a combination of lesser known tools and techniques to capture and later decrypt SSL/TLS network traffic on Windows. This technique is neat because it does not require the installation of additional driver/software when capturing the traffic.
Technique, Tools and Steps It is quite straight f...
WhatsApp can now sue for damages ensued by the installation of the Pegasus spyware
An attacker could perform RCE on a server verifying a maliciously crafted JWT request