Pwn2Own Austin 2021: Synacktiv crowned Masters of Pwn after Sonos One, WD NAS exploits
French team takes home nearly $200k in winnings as event uncovers 61 zero days [...]
Showing only posts by The Daily Swig. Show all posts.
Mozilla disables ‘low usage’ encryption feature to resolve Thunderbird HTTP/2 vulnerability
Multiple flaws in email client resolved with security update [...]
Campaigning lawyers launch counter-offensive against software patent trolls
Stemming the tide of ‘stupid software patents and the trolls they feed’ [...]
Interpol issues arrest warrants for members of Clop ransomware gang
Wanted: cybercriminals behind global malware campaign [...]
Lessons learned: How a severe vulnerability in the OWASP ModSecurity Core Rule Set sparked much-needed change
Years-old WAF bypass flaw was discovered in June [...]
Cisco patches critical bug trio in Policy Suite and ONT networking devices
Critical severity bugs disclosed by networking titan [...]
‘Focus on brilliance at the basics’ – GitHub CSO Mike Hanley on shifting left and securing the software supply chain
Security fundamentals often overlooked in favor of eye-catching initiatives, says infosec pro [...]
US federal agencies ordered to patch hundreds of actively exploited vulnerabilities
CISA directive establishes tight patching deadlines [...]
Majority of consumer IoT vendors still lack vulnerability disclosure programs – report
Dismal findings appear to vindicate global efforts to regulate the sector [...]
Remote code execution, SQL injection bugs uncovered in Pentaho Business Analytics software
Penetration test reveals severe issues in Hitachi Vantara’s business solution [...]
Human rights activists condemn mass denial of service as Sudan’s nationwide internet shutdown enters second week
‘All mobile internet networks are completely cut off,’ one journalist on the ground tells The Daily Swig [...]
Mozilla debuts Site Isolation technology with Firefox update
Sandboxing technology levels up browser security [...]
Dangerous XSS bug in Google Chrome’s ‘New Tab’ page bypassed security features
‘Chrome’s NTP only has a really weak CSP that doesn’t mitigate XSS’ [...]
RCE vulnerability found in Sitecore enterprise CMS software
Vendor update is available now [...]
NIST unveils draft criteria for ‘seal of approval’ scheme on consumer software security
Baseline standards proposed for secure development, handling vulnerabilities, and protecting sensitive data [...]
Mitre-for-malware project MalAPI seeks community support
Windows malware catalogued by API calls [...]
Data breach at US healthcare provider Viverant PT impacts more than 6,500 patients
Minnesota healthcare provider hit by cyber-attack A data breach at a physical therapy center based in the US has breached the personal data of more than 6,500 patients. Viverant PT, based in Minneapol [...]
Data breach at US physical therapy center impacts more than 6,500 patients
Minnesota healthcare provider hit by cyber-attack A US physical therapy center has announced that the personal data of more than 6,500 patients has been breached in a security incident. Viverant PT, b [...]
Multiple flaws in telecoms stack software FreeSwitch uncovered
Authentication and denial of service risks for DIY PBX tech patched [...]
Bug Bounty Radar // The latest bug bounty programs for November 2021
New web targets for the discerning hacker [...]
Ransomware cybercriminals linked to Norsk Hydro attack fall prey to Europol swoop
Two-year investigation results in raids targeting ‘high-value’ suspects and seizure of cash and computers [...]
All Day DevOps 2021: Securing the software supply chain with ephemerality and the least-privilege principle
‘The new boundary for systems engineering is how ephemeral can you make any given process with a privilege’ [...]
Trickbot arrest: Russian national extradited to US for alleged role in developing notorious banking trojan
Vladimir Dunaev made his first appearance in federal court this week [...]
Google, Salesforce, others team up to launch MVSP security baseline project
The collaboration is focused on creating a vendor-neutral security standard [...]
‘Inaction isn’t an option’ – US lawmakers back mandatory standards for transport and logistics cybersecurity
House Committee on Homeland Security hearing pulls focus on securing ‘planes, trains, and pipelines’ [...]
« newer articles | page 30 | older articles »