Port Swigger - Security Alert

Port Swigger

Bug Bounty Radar // The latest bug bounty programs for June 2021

Bug Bounty Radar // The latest bug bounty programs for June 2021

3 years ago 224

EPUB vulnerabilities: Electronic reading systems riddled with browser-like flaws

EPUB vulnerabilities: Electronic reading systems riddled with browser-...

3 years ago 204

Deadshot: Open source DevOps tool stops sensitive data from being uploaded to GitHub

Deadshot: Open source DevOps tool stops sensitive data from being uplo...

3 years ago 167

Klarna privacy clanger blamed on buggy software update

Klarna privacy clanger blamed on buggy software update

3 years ago 176

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Threema, the European rival to Signal, wins pivotal privacy battle in Swiss Court

Threema, the European rival to Signal, wins pivotal privacy battle in ...

3 years ago 227

Argument injection vulnerability in image handling library affects content management systems

Argument injection vulnerability in image handling library affects con...

3 years ago 218

Canada Post reveals supplier data breach involving shipping information of 950,000 parcel recipients

Canada Post reveals supplier data breach involving shipping informatio...

3 years ago 186

Trend Micro home security guardian beset by triple vulnerability threat

Trend Micro home security guardian beset by triple vulnerability threa...

3 years ago 221

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Bluetooth pairing, pwned: Security researchers discover fresh wave of ‘impersonation attack’ flaws in wireless tech

Bluetooth pairing, pwned: Security researchers discover fresh wave of ...

3 years ago 193

Overlooked vulnerabilities in GraphQL open the door to cross-site request forgery attacks

Overlooked vulnerabilities in GraphQL open the door to cross-site requ...

3 years ago 191

Deer.io takedown: Russian citizen jailed for selling stolen personal information of US citizens online

Deer.io takedown: Russian citizen jailed for selling stolen personal i...

3 years ago 158

US healthcare non-profit reports data breach impacting 200,000 patients, employees

US healthcare non-profit reports data breach impacting 200,000 patient...

3 years ago 194

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Nagios IT monitoring vulnerabilities chained to compromise telco customers en masse

Nagios IT monitoring vulnerabilities chained to compromise telco custo...

3 years ago 170

Open source ecosystem ripe for dependency confusion attacks, research finds

Open source ecosystem ripe for dependency confusion attacks, research ...

3 years ago 239

Insider PhD: Hacking education channel suspended from YouTube for ‘severe’ guideline violations

Insider PhD: Hacking education channel suspended from YouTube for ‘sev...

3 years ago 196

DeepSloth: Researchers find denial-of-service equivalent against machine learning systems

DeepSloth: Researchers find denial-of-service equivalent against machi...

3 years ago 178

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

US water filter supplier pays $200K to settle credit card leak lawsuit

US water filter supplier pays $200K to settle credit card leak lawsuit...

3 years ago 171

Critical vulnerabilities patched in QNAP Music Station, Malware Remover apps

Critical vulnerabilities patched in QNAP Music Station, Malware Remove...

3 years ago 176

‘Soft skills are the most under-researched area of the bug bounty industry’ – ‘Reconless’ YouTubers on filling a gap in infosec education

‘Soft skills are the most under-researched area of the bug bounty indu...

3 years ago 211

SolarWinds hack: Nation-state attackers could have launched supply chain attack nine months before previously thought

SolarWinds hack: Nation-state attackers could have launched supply cha...

3 years ago 167

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

WordPress security: More than 600,000 sites hit by blind SQLi vulnerability in WP Statistics plugin

WordPress security: More than 600,000 sites hit by blind SQLi vulnerab...

3 years ago 180

NoSQL injection bugs in Rocket.Chat left servers open to RCE attacks

NoSQL injection bugs in Rocket.Chat left servers open to RCE attacks

3 years ago 203

Making justice secure again: How New Jersey Courts tackled the rush to enable remote working as the start of the Covid-19 pandemic

Making justice secure again: How New Jersey Courts tackled the rush to...

3 years ago 208

Packaging vendor Ardagh admits cyber-attack disrupted operations

Packaging vendor Ardagh admits cyber-attack disrupted operations

3 years ago 354

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Ireland’s national health service offers sitrep after ransomware attack knocked systems offline

Ireland’s national health service offers sitrep after ransomware attac...

3 years ago 174

AXA ransomware attack comes just days after insurer pulled coverage for cyber-attack class in France

AXA ransomware attack comes just days after insurer pulled coverage fo...

3 years ago 168

Magecart Group 12 unleashes stealthy PHP skimmer against vulnerable Magento e-commerce sites

Magecart Group 12 unleashes stealthy PHP skimmer against vulnerable Ma...

3 years ago 180

Microsoft releases free online ‘playbooks’ to help businesses defend against cyber-attacks

Microsoft releases free online ‘playbooks’ to help businesses defend a...

3 years ago 215

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Analysis: Colonial Pipeline’s $5m ransomware payment risks perpetuating cybercrime ‘feedback loop’

Analysis: Colonial Pipeline’s $5m ransomware payment risks perpetuatin...

3 years ago 376

All major desktop browsers vulnerable to tracking flaw that can bypass privacy tools – research

All major desktop browsers vulnerable to tracking flaw that can bypass...

3 years ago 280

Open Distro bug exposed servers to SSRF exploits

Open Distro bug exposed servers to SSRF exploits

3 years ago 248

Shift right: Developers knowingly release insecure applications, says report

Shift right: Developers knowingly release insecure applications, says ...

3 years ago 259

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Aurelia framework’s default HTML sanitizer opens the door to XSS attacks

Aurelia framework’s default HTML sanitizer opens the door to XSS attac...

3 years ago 219

Jenkins Attack Framework: New tool helps uncover little-known vulnerabilities in CI/CD environments

Jenkins Attack Framework: New tool helps uncover little-known vulnerab...

3 years ago 228

Colonial Pipeline cyber-attack: DarkSide ransomware details emerge as US urges critical infrastructure operators to be vigilant

Colonial Pipeline cyber-attack: DarkSide ransomware details emerge as ...

3 years ago 185

UK government releases free cyber-threat warning tool at annual CyberUK conference

UK government releases free cyber-threat warning tool at annual CyberU...

3 years ago 238

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Beyond Lazarus: North Korean cyber-threat groups become top-tier, ‘reckless’ adversaries

Beyond Lazarus: North Korean cyber-threat groups become top-tier, ‘rec...

3 years ago 216

University of California data breach: Sensitive information of staff, students leaked

University of California data breach: Sensitive information of staff, ...

3 years ago 171

What’s TsuNAME? DDoS attack vector threatens authoritative DNS servers

What’s TsuNAME? DDoS attack vector threatens authoritative DNS servers...

3 years ago 220

Pega Infinity hotfix released after researchers flag critical authentication bypass vulnerability

Pega Infinity hotfix released after researchers flag critical authenti...

3 years ago 215

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Four plead guilty to providing ‘bulletproof’ hosting services for cybercriminals

Four plead guilty to providing ‘bulletproof’ hosting services for cybe...

3 years ago 186

Remote Mouse mobile app contains raft of zero-day RCE vulnerabilities

Remote Mouse mobile app contains raft of zero-day RCE vulnerabilities

3 years ago 196

What the FLoC? Everything you need to know about Google’s new ad tech that aims to replace third-party cookies

What the FLoC? Everything you need to know about Google’s new ad tech ...

3 years ago 177

Researcher calls out privacy flaw in Twitter’s new ‘Tip Jar’ donation feature

Researcher calls out privacy flaw in Twitter’s new ‘Tip Jar’ donation ...

3 years ago 194

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Troy Hunt at Black Hat Asia: ‘We’re making it very difficult for people to make good security decisions’

Troy Hunt at Black Hat Asia: ‘We’re making it very difficult for peopl...

3 years ago 174

Researcher discovers vulnerabilities in Azure Functions, stumbles across false oracle

Researcher discovers vulnerabilities in Azure Functions, stumbles acro...

3 years ago 208

Pulse Connect Secure zero-day stars in critical patch batch

Pulse Connect Secure zero-day stars in critical patch batch

3 years ago 235

XSS in the wild: JavaScript-stuffed orders used to compromise Japanese e-commerce sites

XSS in the wild: JavaScript-stuffed orders used to compromise Japanese...

3 years ago 181

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

PHP package manager flaw left millions of web apps open to abuse

PHP package manager flaw left millions of web apps open to abuse

3 years ago 223

UK Computer Misuse Act: Lord Chris Holmes CBE on the CyberUp campaign’s call to overhaul ‘archaic’ legislation

UK Computer Misuse Act: Lord Chris Holmes CBE on the CyberUp campaign’...

3 years ago 182