Port Swigger - Security Alert

Port Swigger

Gitlab patches critical RCE bug in latest security release

Gitlab patches critical RCE bug in latest security release

2 days ago 4

Cyber Europe 2022: EU completes large-scale cyber war game exercise

Cyber Europe 2022: EU completes large-scale cyber war game exercise

2 days ago 4

Latest web hacking tools – Q3 2022

Latest web hacking tools – Q3 2022

2 days ago 3

Bug Bounty Radar // The latest bug bounty programs for July 2022

Bug Bounty Radar // The latest bug bounty programs for July 2022

3 days ago 4

OpenSea reveals email breach, blames employee at third-party vendor

OpenSea reveals email breach, blames employee at third-party vendor

3 days ago 4

Chromium browsers vulnerable to dangling markup injection

Chromium browsers vulnerable to dangling markup injection

3 days ago 5

UnRAR path traversal flaw can lead to RCE in Zimbra

UnRAR path traversal flaw can lead to RCE in Zimbra

4 days ago 3

YARAify: Defensive tool scans suspicious files against a large repository of YARA rules

YARAify: Defensive tool scans suspicious files against a large reposit...

4 days ago 2

Dozens of cryptography libraries vulnerable to private key theft

Dozens of cryptography libraries vulnerable to private key theft

5 days ago 4

Ready meal distributor Apetito restores ‘limited’ deliveries in UK following cyber-attack

Ready meal distributor Apetito restores ‘limited’ deliveries in UK fol...

5 days ago 5

Ransomware market evolution results in fewer variants, but rise in off-the-shelf cybercrime kits continues

Ransomware market evolution results in fewer variants, but rise in off...

5 days ago 4

Researchers crack MEGA’s ‘privacy by design’ storage, encryption

Researchers crack MEGA’s ‘privacy by design’ storage, encryption

6 days ago 6

Untrusted types: Researcher demos trick to beat Trusted Types protection in Google Chrome

Untrusted types: Researcher demos trick to beat Trusted Types protecti...

6 days ago 4

Oracle patches ‘miracle exploit’ impacting Middleware Fusion, cloud services

Oracle patches ‘miracle exploit’ impacting Middleware Fusion, cloud se...

6 days ago 6

BSides Cleveland organizer steps down after controversial guest added as ‘surprise’ speaker

BSides Cleveland organizer steps down after controversial guest added ...

1 week ago 6

Statutory defense for ethical hacking under UK Computer Misuse Act tabled

Statutory defense for ethical hacking under UK Computer Misuse Act tab...

1 week ago 9

Splunk patches critical vulnerability while users push for legacy updates

Splunk patches critical vulnerability while users push for legacy upda...

1 week ago 8

One in every 13 incidents blamed on API insecurity – report

One in every 13 incidents blamed on API insecurity – report

1 week ago 7

Severe Parse Server bug impacts Apple Game Center

Severe Parse Server bug impacts Apple Game Center

1 week ago 9

Single largest disclosure for vulnerabilities in industrial control security reveals 56 flaws

Single largest disclosure for vulnerabilities in industrial control se...

1 week ago 7

Jacuzzi customer details could be exposed by SmartTub web bugs, claims researcher

Jacuzzi customer details could be exposed by SmartTub web bugs, claims...

1 week ago 7

Critical Citrix ADM vulnerability creates means to reset admin passwords

Critical Citrix ADM vulnerability creates means to reset admin passwor...

1 week ago 6

Internet scans find 1.6 million secrets leaked by websites

Internet scans find 1.6 million secrets leaked by websites

1 week ago 6

Attackers can use ‘Scroll to Text Fragment’ web browser feature to steal data – research

Attackers can use ‘Scroll to Text Fragment’ web browser feature to ste...

1 week ago 6

Russian botnet ‘RSOCKS’ dismantled after hacking millions of devices

Russian botnet ‘RSOCKS’ dismantled after hacking millions of devices

2 weeks ago 8

Reddit patches CSRF vulnerability that forced users to view NSFW content

Reddit patches CSRF vulnerability that forced users to view NSFW conte...

2 weeks ago 7

RubyGems trials 2FA-by-default in code repo’s latest security effort

RubyGems trials 2FA-by-default in code repo’s latest security effort

2 weeks ago 9

Ransomware attack on Montrose Environmental Group disrupts lab testing services

Ransomware attack on Montrose Environmental Group disrupts lab testing...

2 weeks ago 7

Business email platform Zimbra patches memcached injection flaw that imperils user credentials

Business email platform Zimbra patches memcached injection flaw that i...

2 weeks ago 7

Dark web awash with breached credentials, study finds

Dark web awash with breached credentials, study finds

2 weeks ago 8

Security researcher receives legal threat over patched Powertek data center vulnerabilities

Security researcher receives legal threat over patched Powertek data c...

2 weeks ago 8

Data breach at US ambulance billing service Comstar exposed patients’ healthcare information

Data breach at US ambulance billing service Comstar exposed patients’ ...

2 weeks ago 6

LenelS2 access control vulnerabilities leave door open to lock manipulation

LenelS2 access control vulnerabilities leave door open to lock manipul...

2 weeks ago 12

GhostTouch: Hackers can reach your phone’s touchscreen without even touching it

GhostTouch: Hackers can reach your phone’s touchscreen without even to...

2 weeks ago 8

Cybercriminals use reverse tunneling and URL shorteners to launch ‘virtually undetectable’ phishing campaigns

Cybercriminals use reverse tunneling and URL shorteners to launch ‘vir...

2 weeks ago 11

French government launches private bug bounty program for identity authentication app

French government launches private bug bounty program for identity aut...

2 weeks ago 9

US Justice Department offers blueprint for more ‘innovative, secure IT capabilities’

US Justice Department offers blueprint for more ‘innovative, secure IT...

3 weeks ago 10

Separate Fujitsu cloud storage vulnerabilities could enable attackers to destroy virtual backups

Separate Fujitsu cloud storage vulnerabilities could enable attackers ...

3 weeks ago 12

Chinese cyber threat actors are widely abusing well-known attacks to infiltrate networks, CISA warns

Chinese cyber threat actors are widely abusing well-known attacks to i...

3 weeks ago 11

Turkish flight operator Pegasus Airlines suffers data breach

Turkish flight operator Pegasus Airlines suffers data breach

3 weeks ago 11

WWDC 2022: Apple showcases next-gen security tech at annual developer event

WWDC 2022: Apple showcases next-gen security tech at annual developer ...

3 weeks ago 14

Indian VPN providers resist incoming data-logging law

Indian VPN providers resist incoming data-logging law

3 weeks ago 10

Google showers top cloud security researchers with kudos and cash

Google showers top cloud security researchers with kudos and cash

3 weeks ago 13

HTTP/3 evolves into RFC 9114 – a security advantage, but not without challenges

HTTP/3 evolves into RFC 9114 – a security advantage, but not without c...

3 weeks ago 10

Vast majority of ethical hackers keen to spend more time bug bounty hunting – report

Vast majority of ethical hackers keen to spend more time bug bounty hu...

3 weeks ago 12

Unpatched bug chain poses ‘mass account takeover’ threat to Yunmai weight monitoring app

Unpatched bug chain poses ‘mass account takeover’ threat to Yunmai wei...

3 weeks ago 14

Incoming! Atlassian Confluence attacks prompt calls for rapid patching

Incoming! Atlassian Confluence attacks prompt calls for rapid patching...

3 weeks ago 13

Insight: Russia is ‘failing’ in its mission to destabilize Ukraine’s networks after a series of thwarted cyber-attacks

Insight: Russia is ‘failing’ in its mission to destabilize Ukraine’s n...

1 month ago 13

US export ban on hacking tools revised after public consultation

US export ban on hacking tools revised after public consultation

1 month ago 16

Horde Webmail contains zero-day RCE bug with no patch on the horizon

Horde Webmail contains zero-day RCE bug with no patch on the horizon

1 month ago 21