This month, we caught up with the maintainers of Open Bug Bounty, a crowdsourced security testing and vulnerability disclosure platform founded in 2014. The non-profit project has around 1,300...
A newly developed plugin allows security analysts and researchers to interact with the Mitre ATT&CK framework without leaving their Visual Studio Code (VSCode) environments. VSCode-ATT&CK, an extension for...
Miscreants are exploiting a newly-discovered vulnerability in the Nagios XI network monitoring software to run crypto-mining malware. The CVE-2021-25296 remote command injection vulnerability is being abused to deploy the XMRig...
A US software developer faces computer sabotage charges after he was arrested over allegations that he planted malicious code on his former employer’s computer servers. Davis Lu, 51,...
ANALYSIS China’s long-established cyber-threat groups have been building up a huge arsenal of resources, comprising both publicly available and customized tools, and diversifying their repertoire amid the...
Cisco has patched two vulnerabilities in its RV34X series of small business-focused routers that could have been exploited separately or chained together to achieve unauthenticated remote code...
A US court action has authorized government authorities to remove backdoors from compromised Microsoft Exchange servers. From the start of the year until at least March...
Working with an MDR provider gives you the talent, tools and full coverage you need There was a time when corporate IT only worried about computing,...
It’s been a month of bumper bug bounty payout news, with Uruguayan researcher Ezequiel Pereira stealing the headlines for winning Google’s GCP VRP Prize 2020. Using an internal version...
New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial...
Recent Comments