Content Paint

cybersecurity

Security | Feb 09, 2021

Hacker gained access to a US water treatment plant, tried to poison water.

Hacker gained access to a US water treatment plant, tried to poison water.

FBI investigating after thwarted breach.

Security | Feb 08, 2021

Another batch of critical bugs in Cisco products raises tough questions.

Another batch of critical bugs in Cisco products raises tough questions.

Cisco product security continues to demand regular urgent patching from users: the company last week pushing out an advisory after multiple critical (CVSS 9.8) vulnerabilities were found in a family of VPN routers. The bugs grant any unauthenticated, remote attacker the ability to execute code as all-powerful root user.

Security | Feb 04, 2021

There's an unpatched 0day in Internet Explorer that's been used to attack security researchers

There's an unpatched 0day in Internet Explorer that's been used to attack security researchers

No response from Microsoft to POC, says ENKI.

Security | Feb 01, 2021

Serco hit by ransomware. Hackers claim 1TB of data stolen.

Serco hit by ransomware. Hackers claim 1TB of data stolen.

An NDA among the documents leaked.

Security | Jan 26, 2021

Millions affected by 10-year old bug in a Linux utility that gives root.

Millions affected by 10-year old bug in a Linux utility that gives root.

Full root privileges on Ubuntu 20.04, Debian 10, and Fedora 33 demonstrated.

Security | Jan 26, 2021

This AWS API bug lets you check permissions without generating logs in CloudTrail: It's not getting fixed.

This AWS API bug lets you check permissions without generating logs in CloudTrail: It's not getting fixed.

Some 645 different API actions across 40 different AWS services affected.

Security | Jan 26, 2021

A social engineering campaign is specifically - and successfully - targeting security researchers.

A social engineering campaign is specifically - and successfully - targeting security researchers.

Possible a Chrome 0day is to blame.

Security | Jan 25, 2021

SonicWall says VPN *is* safe after 0day breach of its mobile access tool - SMA 100 requires remediation.

SonicWall says VPN *is* safe after 0day breach of its mobile access tool - SMA 100 requires remediation.

"A coordinated attack on internal systems by highly sophisticated threat actors"

Security | Jan 22, 2021

SAP's "Active Directory-equivalent" has a CVSS 10-rated critical bug

SAP's "Active Directory-equivalent" has a CVSS 10-rated critical bug

Security experts warn that unpatched vulns remain better than 0days for attackers.

Success! You now have access to additional content.