Dec 14, 2022The Hacker NewsData Security / Compliance Protecting customer data is critical for any business accepting online payment information. The Payment Card Industry Data …
December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More
Dec 14, 2022Ravie LakshmananPatch Management / Vulnerability Tech giant Microsoft released its last set of monthly security updates for 2022 with fixes for 49 vulnerabilities[1] …
Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability
Dec 14, 2022Ravie LakshmananApplication Security / Zero-Day The U.S. National Security Agency (NSA) on Tuesday said[1] a threat actor tracked as APT5 has been actively …
New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products
Dec 14, 2022Ravie LakshmananZero-Day Vulnerability Apple on Tuesday rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browser to address a new …
Google Launches Largest Distributed Database of Open Source Vulnerabilities
Dec 13, 2022Ravie LakshmananOpen Source / Vulnerability Database Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy …
Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities
Dec 13, 2022Ravie LakshmananOpen Source / Vulnerability Database Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy …
Serious Attacks Could Have Been Staged Through This Amazon ECR Public Gallery Vulnerability
Dec 13, 2022Ravie LakshmananSoftware Security / Cloud Security A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could …
Cybersecurity Experts Uncover Inner Workings of Destructive Azov Ransomware
Dec 13, 2022Ravie LakshmananData Security / Endpoint Security Cybersecurity researchers have published the inner workings of a new wiper called Azov Ransomware that’s deliberately designed …
Malware Strains Targeting Python and JavaScript Developers Through Official Repositories
Dec 13, 2022Ravie Lakshmanan An active malware campaign is targeting the Python Package Index (PyPI) and npm repositories for Python and JavaScript with typosquatted and …
Fortinet Warns of Active Exploitation of New SSL-VPN Pre-auth RCE Vulnerability
Dec 13, 2022Ravie LakshmananVirtual Private Network / Network Security Fortinet on Monday issued emergency patches for a severe security flaw affecting its FortiOS SSL-VPN product …
