Port Swigger - Security Alert

Port Swigger

‘A whole new attack surface’ – Researcher Orange Tsai documents ProxyLogon exploits against Microsoft Exchange Server

‘A whole new attack surface’ – Researcher Orange Tsai documents ProxyL...

3 years ago 211

Black Hat USA: Downgrade attack against Let’s Encrypt lowers the bar for printing fraudulent SSL certificates

Black Hat USA: Downgrade attack against Let’s Encrypt lowers the bar f...

3 years ago 338

Dispute erupts between Chaos Computer Club and Germany’s CDU after activist finds alarming data leak

Dispute erupts between Chaos Computer Club and Germany’s CDU after act...

3 years ago 332

Enfilade: Open source tool flags ransomware and bot infections in MongoDB instances

Enfilade: Open source tool flags ransomware and bot infections in Mong...

3 years ago 331

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Writers’ block? Tools that simplify the report-writing process allow security researchers to ‘focus on the fun part’

Writers’ block? Tools that simplify the report-writing process allow s...

3 years ago 196

Bow to the USBsamurai: Malicious USB cable leaves air-gapped networks open to attack

Bow to the USBsamurai: Malicious USB cable leaves air-gapped networks ...

3 years ago 298

Black Hat USA: HTTP/2 flaws expose organizations to fresh wave of request smuggling attacks

Black Hat USA: HTTP/2 flaws expose organizations to fresh wave of requ...

3 years ago 190

Black Hat USA 2021: Lessons to learn from the aviation sector after Biden mandates cyber-attack investigatory body

Black Hat USA 2021: Lessons to learn from the aviation sector after Bi...

3 years ago 186

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Black Hat Briefings: Hosted DNS configuration flaws risk leaking corporate network topologies

Black Hat Briefings: Hosted DNS configuration flaws risk leaking corpo...

3 years ago 272

Black Hat USA: Credential leak detection tool Scrapesy aims to reduce incident response times

Black Hat USA: Credential leak detection tool Scrapesy aims to reduce ...

3 years ago 226

Pakistan government approves new cybersecurity policy, cybercrime agency

Pakistan government approves new cybersecurity policy, cybercrime agen...

3 years ago 217

Black Hat 2021: WARCannon simplifies web-wide vulnerability research

Black Hat 2021: WARCannon simplifies web-wide vulnerability research

3 years ago 305

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Black Hat 2021: Zero-days, ransoms, supply chains, oh my!

Black Hat 2021: Zero-days, ransoms, supply chains, oh my!

3 years ago 203

Decade-long vulnerability in multiple routers could allow network compromise

Decade-long vulnerability in multiple routers could allow network comp...

3 years ago 183

Vulnerability in dating site OkCupid could be used to trick users into ‘liking’ or messaging other profiles

Vulnerability in dating site OkCupid could be used to trick users into...

3 years ago 176

Security researcher finds dangerous bug in Chromium, nabs $15k in bounty

Security researcher finds dangerous bug in Chromium, nabs $15k in boun...

3 years ago 215

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Four-fold increase in software supply chain attacks predicted in 2021 – report

Four-fold increase in software supply chain attacks predicted in 2021 ...

3 years ago 177

Data breach class actions: US Supreme Court decision may tilt the odds in favor of defendant organizations

Data breach class actions: US Supreme Court decision may tilt the odds...

3 years ago 300

Critical flaws in TransLogic Pneumatic Tube System could see attackers sabotage hospital operations

Critical flaws in TransLogic Pneumatic Tube System could see attackers...

3 years ago 313

UK universities awarded funding for research into IoT, smart home security

UK universities awarded funding for research into IoT, smart home secu...

3 years ago 166

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Bug Bounty Radar // The latest bug bounty programs for August 2021

Bug Bounty Radar // The latest bug bounty programs for August 2021

3 years ago 258

Dropbox researchers develop tool to detect lateral movement attacks against enterprise networks

Dropbox researchers develop tool to detect lateral movement attacks ag...

3 years ago 174

Aaron Portnoy – ‘There’s no silver bullet for ransomware or supply chain attacks’

Aaron Portnoy – ‘There’s no silver bullet for ransomware or supply cha...

3 years ago 185

Entertainment tech provider D-Box recovering from ransomware attack

Entertainment tech provider D-Box recovering from ransomware attack

3 years ago 168

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Arrests made over European ATM ‘jackpotting’ spree

Arrests made over European ATM ‘jackpotting’ spree

3 years ago 203

Finders, cheaters: RCE bug in Moodle e-learning platform could be abused to steal data, manipulate results

Finders, cheaters: RCE bug in Moodle e-learning platform could be abus...

3 years ago 231

DDoS attacks recede in Q2 as cryptocurrency price drops

DDoS attacks recede in Q2 as cryptocurrency price drops

3 years ago 414

Data breaches are costing more than ever, as organizations take longer to apply patches – report

Data breaches are costing more than ever, as organizations take longer...

3 years ago 176

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

UC San Diego Health discloses data breach after employee email accounts hijacked

UC San Diego Health discloses data breach after employee email account...

3 years ago 291

Stray GitHub access token from Shopify earns novice bug bounty hunter $50k

Stray GitHub access token from Shopify earns novice bug bounty hunter ...

3 years ago 194

US medical imaging center reports possible data breach after emails ‘accessed’

US medical imaging center reports possible data breach after emails&nb...

3 years ago 272

Chained Zimbra flaws gave attackers unrestricted access to mail servers

Chained Zimbra flaws gave attackers unrestricted access to mail server...

3 years ago 232

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Kaseya denies ransomware payment as it hails ‘100% effective’ decryption tool

Kaseya denies ransomware payment as it hails ‘100% effective’ decrypti...

3 years ago 534

No More Ransom celebrates success in helping 600k people recover from ransomware attacks

No More Ransom celebrates success in helping 600k people recover from ...

3 years ago 176

Security vulnerabilities in IDEMIA access control devices could allow attackers to ‘remotely open doors’

Security vulnerabilities in IDEMIA access control devices could allow ...

3 years ago 253

Potential phishing scam averted following Irish coronavirus certificate website typo

Potential phishing scam averted following Irish coronavirus certificat...

3 years ago 189

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Research roadblock? Security pros weigh in on China’s new vulnerability disclosure law

Research roadblock? Security pros weigh in on China’s new vulnerabilit...

3 years ago 176

Interview: Patchstack’s Oliver Sild on securing WordPress, one plugin vulnerability at a time

Interview: Patchstack’s Oliver Sild on securing WordPress, one plugin ...

3 years ago 186

UK National Lottery Community Fund data breach impacts grant applicants

UK National Lottery Community Fund data breach impacts grant applicant...

3 years ago 169

Dozens of web apps vulnerable to DNS cache poisoning via ‘forgot password’ feature

Dozens of web apps vulnerable to DNS cache poisoning via ‘forgot passw...

3 years ago 238

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Google supercharges Chrome’s phishing detection mechanism

Google supercharges Chrome’s phishing detection mechanism

3 years ago 172

Multiple encryption flaws uncovered in Telegram messaging protocol

Multiple encryption flaws uncovered in Telegram messaging protocol

3 years ago 237

Respect in Security: New infosec campaign aims to stamp out harassment

Respect in Security: New infosec campaign aims to stamp out harassment...

3 years ago 179

Loyalty management tech firm Antavo launches bug bounty program

Loyalty management tech firm Antavo launches bug bounty program

3 years ago 298

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Sensitive medical data of cancer patients at Jefferson Health potentially breached following third-party hack

Sensitive medical data of cancer patients at Jefferson Health potentia...

3 years ago 269

cURL developers take a second shot at fixing information disclosure flaw

cURL developers take a second shot at fixing information disclosure fl...

3 years ago 221

US DHS issues second directive for securing critical fuel supplies in wake of Colonial Pipeline attack

US DHS issues second directive for securing critical fuel supplies in ...

3 years ago 154

WordPress 5.8 update extends Site Health interface for developers

WordPress 5.8 update extends Site Health interface for developers

3 years ago 153

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Update now: TIBCO Data Virtualization software vulnerable to RCE via third-party flaws, claims researcher

Update now: TIBCO Data Virtualization software vulnerable to RCE via t...

3 years ago 182

Snake oil Covid-19 treatment sites seized by US authorities

Snake oil Covid-19 treatment sites seized by US authorities

3 years ago 175