vulnerabilities NIST NVD CISO News Turf wars? NIST to fix NVD backlog by September – insists it’s right agency to run vulnerability database Update comes after CISA started enriching CVEs itself… Edward Targett May 30, 2024
WithSecure China Opinion EU shows "a complete lack of security thinking" says former Estonian president Estonian ex-prez Ilves and Columbia Law prof deliver stark warning to cyberpros Joe Fay May 29, 2024
Zscaler deals Broadcom News "Untrue": Zscaler CEO shoots down Broadcom buyout rumours Anonymous Substack post with AI signs put the fear of Tan in Zscaler staff Edward Targett May 27, 2024
vulnerabilities vmware News Root, but no response: 6 pre-auth RCEs in VMware ignored "Six exploits, no configuration needed, no ports need to get opened; just straight-up RCEs, no fuss, no muss." Edward Targett May 22, 2024
malware Ebury ESET News Single host saw 70,000 servers hit with Ebury backdoor Malware operators “have established a significant presence in data centers worldwide” The Stack May 20, 2024
ransomware Black Basta CISA News Fresh Black Basta TTPs revealed as CISA says CNI hit Ransomware group using "Backstab" to kill EDR processes. Francesca Dean May 13, 2024
Wales SOC Socura Local government News UK's first national SOC opens in Wales -- local authorities encouraged to onboard 18 local authorities along with fire and rescue services to get onboarded to centrally funded Security Operations Centre. The Stack May 10, 2024
Zscaler data breaches News Zscaler breach: Says single test server exposed, downplays risk "No impact or compromise to our customer, production and corporate environments" -- but were credentials stolen? Edward Targett May 09, 2024