Category: Uncategorized
-
Adobe Rolls Out New Patches for Actively Exploited ColdFusion Vulnerability [email protected] (The Hacker News)
Adobe has released a fresh round of updates to address an incomplete fix for a recently disclosed ColdFusion flaw that has come under active exploitation in the wild. The critical shortcoming, tracked as CVE-2023-38205 (CVSS score: 7.5), has been described as an instance of improper access control that could result in a security bypass. It impacts the…
-
Famed Hacker Kevin Mitnick Dead at 59 SecurityWeek News
Famed hacker Kevin Mitnick has died after a battle with pancreatic cancer. At the time of his death, he was KnowBe4 Chief Hacking Officer. The post Famed Hacker Kevin Mitnick Dead at 59 appeared first on SecurityWeek. Read More
-
Microsoft to expand free cloud logging following recent hacks
Post ContentRead More
-
Citrix NetScaler ADC and Gateway flaw exploited in the wild
Post ContentRead More
-
Microsoft Bows to Pressure to Free Up Cloud Security Logs Ryan Naraine
Facing intense pressure after Chinese APT hack, Microsoft plans to expand logging defaults for lower-tier M365 customers. The post Microsoft Bows to Pressure to Free Up Cloud Security Logs appeared first on SecurityWeek. Read More
-
Recycling Giant Tomra Takes Systems Offline Following Cyberattack Ionut Arghire
Norwegian recycling giant Tomra says internal systems have been taken offline to contain an extensive cyberattack. The post Recycling Giant Tomra Takes Systems Offline Following Cyberattack appeared first on SecurityWeek. Read More
-
Two Jira Plugin Vulnerabilities in Attacker Crosshairs Ionut Arghire
Attackers are exploiting two path traversal vulnerabilities in the Stagil navigation for Jira – Menus & Themes plugin. The post Two Jira Plugin Vulnerabilities in Attacker Crosshairs appeared first on SecurityWeek. Read More
-
Virtual Event Today: 2023 Cloud & Data Security Summit Mike Lennon
Register for the Cloud & Data Security Summit to learn how to utilize tools, controls, and design models needed to properly secure cloud environments. The post Virtual Event Today: 2023 Cloud & Data Security Summit appeared first on SecurityWeek. Read More
-
Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks Eduard Kovacs
Over a dozen vulnerabilities patched by GE in its Cimplicity HMI/SCADA product are reminiscent of ICS attacks conducted by the Russian Sandworm group. The post Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks appeared first on SecurityWeek. Read More
-
How to Manage Your Attack Surface? [email protected] (The Hacker News)
Attack surfaces are growing faster than security teams can keep up. To stay ahead, you need to know what’s exposed and where attackers are most likely to strike. With cloud migration dramatically increasing the number of internal and external targets, prioritizing threats and managing your attack surface from an attacker’s perspective has never been more…