Cybersecurity

Fix up, look sharp: Uncle Sam is running out of patience with tech firms shipping insecure software. Vendors? Get familiar with the phrase "query parameterization"...

Cybersecurity agency's cybersecurity appliance breached (yes, everything is broken) but no exfiltration seen says CISA

Companies and countries clash over ENISA cloud security certification

Camera emoji? "Take a screenshot of the victim's screen and upload it to the command channel as an attachment."

“CVE-2024-28995 is not known to be exploited in the wild as of 9 AM ET on June 11. We expect this to change."

"The user must be left in the disabled state for 6 hours to fully invalidate any possible unauthorized access via this ID token feature."

106,000 customers publicly exposed, initial searches suggest.

Update comes after CISA started enriching CVEs itself…

Estonian ex-prez Ilves and Columbia Law prof deliver stark warning to cyberpros