Security

Security | Oct 04, 2022

Critical Akamai bug could have let hackers poison millions of major brands' websites

Absence of a bug bounty programme led to a “race against time” for customer bug bounties...

Security | Sep 30, 2022

Bolster your VMware ESXi security: Novel malware ecosystem identified

Malware avoids EDR, attains persistence, is highly stealthy

Security | Sep 30, 2022

Two unpatched Microsoft Exchange Server zero days are under attack.

Exploited for a month. No detection in Sentinel, no patch yet. Mitigate urgently.

Identity | Sep 29, 2022

Major authentication provider Auth0 says code repositories were copied

Mystery around the data breach, but we can speculate...

Security | Sep 27, 2022

Aussie Cyber Minister blasts telco's "sophisticated" hack claims: "No. It wasn't"

"They left the window open"

Security | Sep 26, 2022

British gov't aims to kill off Companies House's Bobby Tables problem

The British government is changing Companies House name rules to prevent people from creating company names which include code that could sabotage unwary data processors through cross-site scripting (XSS) injection attacks. When a company is registered in the UK, it has to follow certain rules about its name – but provided

Security | Sep 24, 2022

Second critical Sophos Firewall bug exploited in wild

CVSS 9.8 vulnerability added to CISA "known exploited" catalogue

Security | Sep 20, 2022

Oracle Cloud the latest to be exposed by Wiz for tenant isolation failure

Oracle fixed the vulnerability "extraordinarily quickly" in July, but it is unclear when it was introduced

Security | Sep 20, 2022

Uber hack update: Initial analysis suggests contractor creds bought on dark web

“We’ve not seen the attacker accessed the production systems."

document.currentScript.parentNode.innerHTML = (parseInt(document.currentScript.closest('.iteration-container').dataset.length)).toString();