WhiteHat Security published their latest installment of the AppSec Stats Flash report and podcast, surveying the current state of the application security and wider threat landscape. Key findings...
The Chromium team has patched a 2.5-year-old bug that made it possible to stage cross-site scripting (XSS) attacks on web pages, even if they had been configured to...
A researcher discovered multiple vulnerabilities in smart switches of Cisco’s Small Business 220 series, including some issues rated as high severity. Security researcher Jasper Lievisse Adriaanse...
Python-coded malware used in Microsoft Exchange Server exploitation Black Kingdom ransomware appeared on the scene back in 2019, but we observed some activity again in 2021....
Intelligent systems must include the right cybersecurity protections to prevent physical threats to operational technology. For the first two decades of the Internet era, operational technology...
A recent report by Salt Security shows that 91% of organizations suffered an API-related problem in the last year, and more than half (54%) reported finding vulnerabilities in...
Global research commissioned by Versa Networks examining the adoption of Secure Access Service Edge (SASE) by businesses during the lockdown revealed that the adoption of SASE has skyrocketed...
The Identity Defined Security Alliance (IDSA), a nonprofit that provides vendor-neutral resources to help organizations reduce the risk of a breach by combining identity and security strategies,...
The Colorado Privacy Act (CPA) passed yesterday in the state’s senate and will go into effect in July 2023 – creating an additional regulation that organizations must comply with...
High-performing security organizations driving dramatic and substantive change, and reaping the benefits of going “all in” on cloud Devo Technology announced the results of a report assessing...