Port Swigger - Security Alert

Port Swigger

Instagram vulnerability nets researcher $30k after exposing users’ private content

Instagram vulnerability nets researcher $30k after exposing users’ pri...

3 years ago 186

Ukrainian man sentenced to prison for his part in billion-dollar FIN7 cybercrime campaign

Ukrainian man sentenced to prison for his part in billion-dollar FIN7 ...

3 years ago 185

Security organizations join forces with EFF to lobby for DMCA reform

Security organizations join forces with EFF to lobby for DMCA reform

3 years ago 315

‘LEXSS’ injection: How to bypass lexical parsers by abusing HTML parsing logic

‘LEXSS’ injection: How to bypass lexical parsers by abusing HTML parsi...

3 years ago 251

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

West Virginia job seekers alerted to gov’t employment agency data breach

West Virginia job seekers alerted to gov’t employment agency data brea...

3 years ago 200

Misconfigurations in most Active Directory environments create serious security holes, researchers find

Misconfigurations in most Active Directory environments create serious...

3 years ago 240

EU pushes plans for Joint Cyber Unit in fight against increased cyber-attacks

EU pushes plans for Joint Cyber Unit in fight against increased cyber-...

3 years ago 192

Data breach at US eye clinic impacting 500,000 patients potentially exposed private medical information

Data breach at US eye clinic impacting 500,000 patients potentially ex...

3 years ago 178

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Zero-day vulnerabilities in Pling leave Linux marketplaces open to RCE, supply chain attacks

Zero-day vulnerabilities in Pling leave Linux marketplaces open to RCE...

3 years ago 200

European Commission to hold ‘hackathon’ in bid to secure data sharing across EU

European Commission to hold ‘hackathon’ in bid to secure data sharing ...

3 years ago 197

Asia-Pacific internet registry APNIC says WHOIS admin passwords were mistakenly exposed for three months

Asia-Pacific internet registry APNIC says WHOIS admin passwords were m...

3 years ago 171

Zero-encryption zero-day – Android fitness app caught sending data in clear text

Zero-encryption zero-day – Android fitness app caught sending data in ...

3 years ago 164

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Intent redirection vulnerabilities in popular Android apps spotlight danger of dynamic code loading, warn researchers

Intent redirection vulnerabilities in popular Android apps spotlight d...

3 years ago 185

CSP bypass: How one Chrome XSS bug took 2.5 years and an HTML spec change to fix

CSP bypass: How one Chrome XSS bug took 2.5 years and an HTML spec cha...

3 years ago 185

US supermarket chain Wegmans suffers data breach due to ‘misconfigured’ databases

US supermarket chain Wegmans suffers data breach due to ‘misconfigured...

3 years ago 200

NIST, Google chart course towards more secure software supply chains

NIST, Google chart course towards more secure software supply chains

3 years ago 205

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Healthcare vendor Zoll patches high-risk vulnerabilities in defibrillator management software

Healthcare vendor Zoll patches high-risk vulnerabilities in defibrilla...

3 years ago 203

XSS flaw in Wire messaging app allowed attackers to ‘fully control’ user accounts

XSS flaw in Wire messaging app allowed attackers to ‘fully control’ us...

3 years ago 167

Google abandons plans to simplify URLs in Chrome following real-world testing

Google abandons plans to simplify URLs in Chrome following real-world ...

3 years ago 171

UK legal firm Gateley warns of data breach following cyber-attack

UK legal firm Gateley warns of data breach following cyber-attack

3 years ago 303

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Google open-sources tools to bring fully homomorphic encryption into the mainstream

Google open-sources tools to bring fully homomorphic encryption into t...

3 years ago 197

Hacker community jumps on hilarious Twitter meme mocking bad infosec advice from CISOs

Hacker community jumps on hilarious Twitter meme mocking bad infosec a...

3 years ago 228

Vulnerability in Microsoft Teams granted attackers access to emails, messages, and personal files

Vulnerability in Microsoft Teams granted attackers access to emails, m...

3 years ago 180

US Computer Fraud and Abuse Act: What the ‘landmark’ Van Buren ruling means for security researchers

US Computer Fraud and Abuse Act: What the ‘landmark’ Van Buren ruling ...

3 years ago 173

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Thousands of VMWare vCenter Server instances still unpatched against critical flaws three weeks post-disclosure

Thousands of VMWare vCenter Server instances still unpatched against c...

3 years ago 218

Security researcher turns Apache Airflow into bug bounty cash cow

Security researcher turns Apache Airflow into bug bounty cash cow

3 years ago 195

Asian e-commerce giant Lazada launches first public bug bounty program

Asian e-commerce giant Lazada launches first public bug bounty program...

3 years ago 274

Android screen lock protection thwarted by Facebook Messenger Rooms exploit

Android screen lock protection thwarted by Facebook Messenger Rooms ex...

3 years ago 210

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Cybersecurity for charities: How to protect your non-profit from cyber-attacks

Cybersecurity for charities: How to protect your non-profit from cyber...

3 years ago 232

CD Projekt Red: Games developer releases more details about cyber-attack that exposed private data

CD Projekt Red: Games developer releases more details about cyber-atta...

3 years ago 189

SIP protocol abused to trigger XSS attacks via VoIP call monitoring software

SIP protocol abused to trigger XSS attacks via VoIP call monitoring so...

3 years ago 201

Al Jazeera repels cyber-attacks that sought to disrupt media network

Al Jazeera repels cyber-attacks that sought to disrupt media network

3 years ago 181

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

CVE board slams Distributed Weakness Filing project for publishing ‘unauthorized’ CVE records

CVE board slams Distributed Weakness Filing project for publishing ‘un...

3 years ago 204

Google Chrome Web Store is ranking suspicious web extensions above popular plugins

Google Chrome Web Store is ranking suspicious web extensions above pop...

3 years ago 176

Colonial Pipeline cyber-attack: US authorities seize $2.3m in DarkSide ransomware payments

Colonial Pipeline cyber-attack: US authorities seize $2.3m in DarkSide...

3 years ago 184

‘Being serious about security is a must’ – Apache Software Foundation custodians on fulfilling its founding mission

‘Being serious about security is a must’ – Apache Software Foundation ...

3 years ago 164

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Dual vulnerability combo in popular CMS Joomla could lead to full system compromise

Dual vulnerability combo in popular CMS Joomla could lead to full syst...

3 years ago 172

US government launches first VDP program for federal civilian agencies

US government launches first VDP program for federal civilian agencies...

3 years ago 200

GitHub changes policy to welcome security researchers

GitHub changes policy to welcome security researchers

3 years ago 204

Critical zero-day vulnerabilities found in ‘unsupported’ Fedena school management software

Critical zero-day vulnerabilities found in ‘unsupported’ Fedena school...

3 years ago 188

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Security vulnerability in Hyperkitty could expose private data

Security vulnerability in Hyperkitty could expose private data

3 years ago 173

Microsoft debuts Automatic HTTPS for Edge in secure browsing upgrade

Microsoft debuts Automatic HTTPS for Edge in secure browsing upgrade

3 years ago 169

Korenix patches multiple critical vulnerabilities in networking devices

Korenix patches multiple critical vulnerabilities in networking device...

3 years ago 228

Getting the message: Organizations without vulnerability disclosure policies failing to address researchers’ security warnings

Getting the message: Organizations without vulnerability disclosure po...

3 years ago 279

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Akamai offers post-mortem on recently resolved authentication platform vulnerability

Akamai offers post-mortem on recently resolved authentication platform...

3 years ago 188

US court offers clarity on evaluating ‘future risk’ injuries in data breach class action litigation

US court offers clarity on evaluating ‘future risk’ injuries in data b...

3 years ago 220

Spear-phishing campaign linked to SolarWinds attackers halted following domain seizure

Spear-phishing campaign linked to SolarWinds attackers halted followin...

3 years ago 232

Ransomware attack on world’s biggest meat supplier JBS ‘came from Russia’

Ransomware attack on world’s biggest meat supplier JBS ‘came from Russ...

3 years ago 158

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Apache Pulsar bug allowed account takeovers in certain configurations

Apache Pulsar bug allowed account takeovers in certain configurations

3 years ago 187

Gaming mod development platform Overwolf fixes bug that could allow RCE via chained exploit

Gaming mod development platform Overwolf fixes bug that could allow RC...

3 years ago 224