cybersecurity
A months-long malware campaign was seen exploiting a zero-day flaw in WinRAR for spear-phishing attacks aimed at traders and finance professionals
Want to let criminals “query your databases, add/change/delete files, export data or files off your server”? No, then you should probably be paying close attention to whether you are running Adobe ColdFusion and if you are exposed...
Ivanti is warning of attacks on its MobileIron platform due to improper handling of APIs
"We have gotten very smart on how to do business with agencies and build in flexibility into our contracting vehicles. We took an approach early on to divide and conquer..."
"To the 731 people who have DVWA exposed to the internet, I apologise for CVE-2023-39848, I recommend you temporarily remove them from the internet till I can create a patch."
Pre-auth RCE in Citrix ShareFile has the potential to be the next MOVEit, or Accellion, or GoAnywhere, or Aspera Faspex, or...
"As the collective business sector starts to awaken to the size and scale of the risk, the battle for exceptional CISOs will be fierce..."
Keyboard clicks are giving up more information than you think, according to university researchers
Two CVEs dominate attack traffic and one will look very familiar: So will six others...