cybersecurity

Security | Dec 09, 2021

Hackers <3 VPN bugs: Fix this pre-auth RCE bug in SonicWall VPNs asap

Patch, patch, patch...

Security | Dec 08, 2021

Canadian, US authorities admit offensive action against ransomware gangs -- but not everyone's gung-ho.

"Sorting that out isn’t anymore the preserve of spy agencies or niche security organisations..."

Security | Dec 07, 2021

A record number of software vulnerabilities was reported in 2021

Mean-time-to-Patch, meanwhile? 205 days...

Security | Nov 29, 2021

New Lloyd's cyber insurance clauses: buyers, make sure you read the "war" exclusions closely

"Underwriters should consider... the impact on exposures across the portfolio."

Security | Nov 25, 2021

This RAT is hiding in “February 31” in the Linux calendar -- and card skimming is moving from the browser to the server

Sophisticated new malware is attacking ecommerce servers

Security | Nov 24, 2021

Cloud Postgres honeypots breached within seconds -- and your IP filter is unlikely to save you

IP-blocking won't do much...

Security | Nov 18, 2021

"Keys to the cloud" stored in plain text in Azure AD security blooper

"It is best to assume that the credentials may have been compromised..."

Security | Nov 18, 2021

Understanding Cyber Essentials' five core technical controls

At just £300 and with free insurance, you'd be mad not to...

Security | Nov 15, 2021

BitLocker used to attack servers in "intrusion with almost no malware"

Hackers breached an organisation running on-premises Microsoft Exchange servers and after moving laterally proceeded to encrypt systems domain wide, using Microsoft's own BitLocker tool rather than malware associated with a Ransomware-as-a-Service group, analysts writing for The DFIR report said Monday. Dubbing it an "intrusion with almost no

document.currentScript.parentNode.innerHTML = (parseInt(document.currentScript.closest('.iteration-container').dataset.length)).toString();