Jan 18, 2023The Hacker NewsVirtual CISO / Automated vCISO Compliance services are emerging as one of the hottest areas of cybersecurity. While compliance used to …
Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers
Jan 18, 2023Ravie LakshmananNetwork Security Security vulnerabilities have been disclosed in Netcomm and TP-Link routers, some of which could be weaponized to achieve remote code …
Git Users Urged to Update Software to Prevent Remote Code Execution Attacks
Jan 18, 2023Ravie LakshmananDevOpsSec / Software Security The maintainers of the Git[1] source code version control system have released updates to remediate two critical vulnerabilities …
CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems
Jan 18, 2023Ravie LakshmananICS/SCADA Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published[1] four Industrial Control Systems (ICS) advisories, calling out several security …
Microsoft Azure Services Flaws Could’ve Exposed Cloud Resources to Unauthorized Access
Jan 17, 2023Ravie LakshmananCloud Security / Bug Report Four different Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF[1]) attacks that could …
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware
Jan 17, 2023Ravie LakshmananThreat Response / Malware New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub …
4 Places to Supercharge Your SOC with Automation
It’s no secret that the job of SOC teams continues to become increasingly difficult. Increased volume and sophistication of attacks are plaguing under-resourced teams with …
Zoho ManageEngine PoC Exploit to be Released Soon – Patch Before It’s Too Late!
Jan 17, 2023Ravie LakshmananCyber Threat / Vulnerability Users of Zoho ManageEngine are being urged to patch their instances against a critical security vulnerability ahead of …
Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems
Jan 17, 2023Ravie LakshmananSoftware Security / Supply Chain A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index …
Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software
Jan 16, 2023Ravie LakshmananData Security / Cyber Threat A “large and resilient infrastructure” comprising over 250 domains is being used to distribute information-stealing malware such …
