Horizon3 security researchers have released proof-of-concept (PoC) exploit code for a remote code execution (RCE) bug in the MOVEit Transfer...
The agency aims to be “more aggressive” in searching for network protections. The Federal Aviation Administration is working on a new IT contract for managing its...
When a company’s global workforce transitioned to remote work almost overnight, it looked to a recent acquisition to help safeguard critical data. OpenText acquired Carbonite and...
CYBER.ORG announced the kickoff of a new pilot program created to recruit a diverse body of K-12 students to pursue undergraduate cybersecurity degrees and bolster the U.S....
Data breach and privacy incidents occur daily at organizations of all sizes. Just recently, hackers broke into a water treatment facility in Florida, gaining access to an...
Despite the vaccine rollout, it seems unlikely that things will ever return to the way they were before the pandemic. A recent PWC survey found that 78% of...
A software supply chain attack—such as the recent SolarWinds Orion attack—occurs when a cyber threat actor infiltrates a software vendor’s network and employs malicious code to...
A security incident at online marketplace Reverb has exposed the personal data of users. Reverb, which connects buyers and sellers of secondhand musical instruments, urged users to reset...
A newly developed plugin allows security analysts and researchers to interact with the Mitre ATT&CK framework without leaving their Visual Studio Code (VSCode) environments. VSCode-ATT&CK, an extension for...
Embedthis has patched a null byte injection vulnerability in GoAhead, the embedded web server deployed in hundreds of millions of devices. “A specially crafted URL with a %00 character embedded...
An XML External Entity (XXE) injection bug in WordPress could allow attackers to remotely steal a victim’s files, researchers have revealed. Security researchers at SonarSource who discovered the...
Recent Comments