A new set of documents and resources from the agency is designed to help critical infrastructure operators manage the basics of cybersecurity. The Cybersecurity and Infrastructure...
A flaw in GitHub’s namespace retirement feature could have allowed attackers to potentially access another user’s repository. Coined ‘repojacking’ by researchers from Checkmarx, the technique could...
Are you concerned about the security of your external web applications? Rightly so, as cyber-attacks on web applications are on the rise and can do some...
A provision included in House and Senate legislation authorizing Defense Department spending for fiscal year 2023 would allow veterans and military spouses to receive cyber training...
Initial baselines address Microsoft services, and baselines for configuring rival services from Google are up next. The Cybersecurity and Infrastructure Security Agency is inviting public comment—particularly...
A pair of vulnerabilities patched in Jira Align could in the “worst-case scenario” be combined by low-privileged malicious users to target Atlassian’s cloud infrastructure, a security...
VMware has released security updates today to fix a critical vulnerability in VMware Cloud Foundation, a hybrid cloud platform for running enterprise apps in private or...
The Dutch police have arrested a 19-year-old man in western Netherlands, suspected of breaching the systems of a healthcare software vendor in the country, and stealing...
Fortinet is urging customers to patch a critical authentication bypass vulnerability that has already been exploited in the wild. Earlier this month, the networking vendor patched the bug, CVE-2022-40684,...
Melis Platform, the open source e-commerce and content management system (CMS), was vulnerable to remote code execution (RCE) via a critical deserialization vulnerability. Tracked as CVE-2022-39297 and with a CVSS score of...
Recent Comments