Vulnerabilities in ImpressCMS could allow an unauthenticated attacker to bypass the software’s SQL injection protections to achieve remote code execution (RCE), a security researcher has warned....
An EU proposal to force browsers to accept web certificates created by the bloc risks “upsetting a carefully curated set of rules and technologies that undergird...
The department is in a bit of an awkward position, tasked with supporting the industry while cautioning against ransomware payouts. The Treasury Department is asking what...
Japanese confectionary manufacturer Morinaga has warned that a suspected data breach of its online store may have exposed the personal information of more than 1.6 million customers. Potentially...
A “crazy” parser bug potentially leading to XSS exploits has been patched by Chromium developers. The vulnerability was reported in July 2021 to Chromium developers by...
A Ukrainian internet service provider (ISP) that supplies the country’s military was hit by a cyber-attack yesterday (March 28), knocking networks offline. The State Service of Special Communications...
The administration expects CISA to grow by just under 300 full-time employees over the next year, for example. President Joe Biden is stressing a commitment to...
Attackers are exploiting security vulnerabilities more quickly, often within a week of their public disclosure, according to a study by Rapid7. The latest edition of Rapid7’s annual Vulnerability Intelligence...
The EU’s cybersecurity agency has called for further research into the use of pseudonymization to help bolster data protection measures in the healthcare sector. Pseudonymization de-associates a data...
The US Federal Communications Commission (FCC) has added Russian security vendor Kaspersky to its list of potential threats for American businesses. In a statement published on Friday (March...
Recent Comments