A three-day hackathon held by Yahoo last week uncovered hundreds of security bugs in its text search engine tool Vespa. The event, held in Antwerp, Belgium...
A security researcher has discovered a way to launch code execution attacks by exploiting the GitHub Pages build process. Joren Vrancken netted a $4,000 reward for...
Apple has released new security updates to backport patches released earlier this month to older iPhones and iPads addressing a remotely exploitable WebKit zero-day that allows attackers to execute arbitrary code...
The role of the Chief Information Security Officer (CISO) is a relatively new senior-level executive position within most organizations, and is still evolving. To find out how current CISOs...
Security Compass has published the results of a research study examining developer views on application security, including the challenges and opportunities they face in their secure development...
A global research commissioned by Cohesity reveals that nearly half of respondents say their company depends on outdated, legacy backup and recovery infrastructure to manage and protect their...
Researchers at Johns Hopkins University have developed a graph-based code analysis tool that can detect a wide range of vulnerabilities in JavaScript programs. Called ODGen, the tool...
Threat analysts at McAfee found five Google Chrome extensions that steal track users’ browsing activity. Collectively, the extensions have been downloaded more then 1.4 million times. The purpose...
Google will now pay security researchers to find and report bugs in the latest versions of Google-released open-source software (Google OSS). The company’s newly announced Vulnerability...
The U.S. Federal Bureau of Investigation (FBI) is warning investors that cybercriminals are increasingly exploiting security vulnerabilities in Decentralized Finance (DeFi) platforms to steal cryptocurrency. “The...