Researchers from cybersecurity firm Cybereason has released a “vaccine” that can be used to remotely mitigate the critical ‘Log4Shell’ Apache Log4j code execution vulnerability running rampant...
Ethical hackers have reported over 66,000 valid vulnerabilities through HackerOne this year, an increase of 22% from 2020. The annual Hacker-Powered Security Report from bug bounty platform HackerOne, published on...
The US-CERT Vulnerability database has recorded 18376 vulnerabilities as of December 8, 2021, which surpasses the 2020 record of 18351. More than 50 common vulnerabilities and...
Cybercriminals continue to evolve their tactics, developing more sophisticated ways to persistently target the global payments ecosystem. With the disruption of Joker’s Stash, Emotet, Netwalker, Egregor,...
Telos Corporation released new findings from research conducted by independent research firm Vanson Bourne that examines how financial services are faring with the ever-increasing challenge of...
Salt Security released new API threat research from Salt Labs that highlights a GraphQL API authorization vulnerability in a B2B financial technology (FinTech) platform. The findings,...
The new Federal Information Security Modernization Act guidance also prioritizes security testing and doubles down on CISA’s Continuous Diagnostics and Mitigation program. The Office of Management...
Critical vulnerabilities in open source forum platform NodeBB could allow attackers to steal private information and access admin accounts, researchers have warned. NodeBB is a JavaScript-based...
The corporate watchdog said overly ambitious targets, a rise in cyber threats, and COVID-19 disruptions were to blame for the cyber resiliency shortfall. Firms in Australia’s...
A pair of US identity thieves who targeted elderly people using compromised information bought through dark web cybercrime forums have been sent to prison. Durrell Tyler, 29, and...