Port Swigger - Security Alert

Port Swigger

Bug Bounty Radar // The latest bug bounty programs for May 2021

Bug Bounty Radar // The latest bug bounty programs for May 2021

3 years ago 391

Stored XSS vulnerability patched in open source firewall pfSense

Stored XSS vulnerability patched in open source firewall pfSense

3 years ago 242

Raising the privacy bar: Tiki app aims to hand ownership of personal data back to the individual

Raising the privacy bar: Tiki app aims to hand ownership of personal d...

3 years ago 208

Time to update DNS servers to defend against brace of serious BIND vulnerabilities

Time to update DNS servers to defend against brace of serious BIND vul...

3 years ago 179

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Covid-19, breath alcohol test results of 164,000 Wyoming residents mistakenly exposed on GitHub

Covid-19, breath alcohol test results of 164,000 Wyoming residents mis...

3 years ago 180

Google Android’s implementation of privacy-preserving contact tracing ‘flawed’

Google Android’s implementation of privacy-preserving contact tracing ...

3 years ago 211

Musical instrument marketplace Reverb suffers data breach

Musical instrument marketplace Reverb suffers data breach

3 years ago 164

VSCode integration with Mitre ATT&CK framework allows security researchers to maintain focus

VSCode integration with Mitre ATT&CK framework allows security res...

3 years ago 232

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

GoAhead devs fix null byte injection vulnerability in embedded web server

GoAhead devs fix null byte injection vulnerability in embedded web ser...

3 years ago 190

WordPress XXE injection vulnerability could allow attackers to remotely steal host files

WordPress XXE injection vulnerability could allow attackers to remotel...

3 years ago 246

Machine learning security vulnerabilities are a growing threat to the web, report highlights

Machine learning security vulnerabilities are a growing threat to the ...

3 years ago 186

Passwordstate credentials potentially ‘harvested’ after malicious software update injected into password manager

Passwordstate credentials potentially ‘harvested’ after malicious soft...

3 years ago 179

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Emotet clean-up: Security pros draw lessons from botnet menace as kill switch is activated

Emotet clean-up: Security pros draw lessons from botnet menace as kill...

3 years ago 311

Dan Kaminsky: Tributes pour in for security researcher who died after short illness

Dan Kaminsky: Tributes pour in for security researcher who died after ...

3 years ago 201

Mining technology company Gyrodata hit by ransomware attack – employee data leaked

Mining technology company Gyrodata hit by ransomware attack – employee...

3 years ago 167

CocoaPods RCE exploit exposed keys to repo used by three million mobile apps

CocoaPods RCE exploit exposed keys to repo used by three million mobil...

3 years ago 176

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Xerox vulnerability disclosure legal threat withdrawn

Xerox vulnerability disclosure legal threat withdrawn

3 years ago 191

Vulnerability in Homebrew macOS package manager could allow arbitrary code execution

Vulnerability in Homebrew macOS package manager could allow arbitrary ...

3 years ago 157

Ill-advised research on Linux kernel lands computer scientists in hot water

Ill-advised research on Linux kernel lands computer scientists in hot ...

3 years ago 162

‘We are not motivated by profits’ – Open Bug Bounty maintainers on finding a niche in the crowdsourced AppSec market

‘We are not motivated by profits’ – Open Bug Bounty maintainers on fin...

3 years ago 2160

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Ransomware attacks on shipping, logistics organizations rising as coronavirus vaccine supply chain targeted

Ransomware attacks on shipping, logistics organizations rising as coro...

3 years ago 169

Valve belatedly fixes Steam gaming platform RCE vulnerability

Valve belatedly fixes Steam gaming platform RCE vulnerability

3 years ago 149

Don’t panic! DEF CON warrant canary confusion blamed on ‘CMS mistake’

Don’t panic! DEF CON warrant canary confusion blamed on ‘CMS mistake’

3 years ago 168

Zero-day vulnerabilities in SonicWall email client led to network access, backdoors installed

Zero-day vulnerabilities in SonicWall email client led to network acce...

3 years ago 153

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Telecoms industry facing increased DDoS attacks, report warns

Telecoms industry facing increased DDoS attacks, report warns

3 years ago 154

QNAP fixes critical RCE vulnerabilities in NAS devices

QNAP fixes critical RCE vulnerabilities in NAS devices

3 years ago 150

Vulnerability in Nagios XI exploited by cryptojacking crooks to hijack systems

Vulnerability in Nagios XI exploited by cryptojacking crooks to hijack...

3 years ago 174

Django Debug Toolbar tripped up by SQL injection flaw

Django Debug Toolbar tripped up by SQL injection flaw

3 years ago 173

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Codecov users warned after backdoor discovered in DevOps tool

Codecov users warned after backdoor discovered in DevOps tool

3 years ago 158

Drinks giant C&C Group subsidiary shuts down IT systems following security incident

Drinks giant C&C Group subsidiary shuts down IT systems following ...

3 years ago 162

Researchers trick Duo 2FA into sending authentication request to attacker-controlled device

Researchers trick Duo 2FA into sending authentication request to attac...

3 years ago 194

Swiss Post launches public bug bounty program with YesWeHack

Swiss Post launches public bug bounty program with YesWeHack

3 years ago 196

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Cockpit CMS flaws exposed web servers to NoSQL injection exploits

Cockpit CMS flaws exposed web servers to NoSQL injection exploits

3 years ago 165

Software developer charged with sabotaging employer’s systems through denial-of-service attack

Software developer charged with sabotaging employer’s systems through ...

3 years ago 152

When vulnerability disclosure goes sour: New GitHub repo details legal threats and risks faced by ethical hackers

When vulnerability disclosure goes sour: New GitHub repo details legal...

3 years ago 165

Behind the Great Firewall: Chinese cyber-espionage adapts to post-Covid world with stealthier attacks

Behind the Great Firewall: Chinese cyber-espionage adapts to post-Covi...

3 years ago 159

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Cisco router flaws left small business networks open to abuse

Cisco router flaws left small business networks open to abuse

3 years ago 159

Feds zap Exchange Server backdoors as Microsoft offers patches for further flaws

Feds zap Exchange Server backdoors as Microsoft offers patches for fur...

3 years ago 161

Inference attacks: How much information can machine learning models leak?

Inference attacks: How much information can machine learning models le...

3 years ago 158

Pressure grows on Valve to unplug Steam gaming platform vulnerabilities

Pressure grows on Valve to unplug Steam gaming platform vulnerabilitie...

3 years ago 170

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Capcom ransomware attack: Hackers gained access via vulnerable VPN, report finds

Capcom ransomware attack: Hackers gained access via vulnerable VPN, re...

3 years ago 182

Surge in malware and cyber-attacks set to continue, Europol warns in SOCTA 2021 report

Surge in malware and cyber-attacks set to continue, Europol warns in S...

3 years ago 176

Indian stock trading site Upstox resets passwords in response to data breach fears

Indian stock trading site Upstox resets passwords in response to data ...

3 years ago 194

Covid-19 pandemic: How bug bounty programs helped secure some of the world’s leading track and trace apps

Covid-19 pandemic: How bug bounty programs helped secure some of the w...

3 years ago 207

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Pwn2Own 2021: Zero-click Zoom exploit among winners as payout record smashed

Pwn2Own 2021: Zero-click Zoom exploit among winners as payout record s...

3 years ago 219

Discord desktop app vulnerable to RCE via chained exploit

Discord desktop app vulnerable to RCE via chained exploit

4 years ago 196

Vulnerability in WordPress plugin TI WooCommerce Wishlist could allow full site takeover

Vulnerability in WordPress plugin TI WooCommerce Wishlist could allow ...

4 years ago 158

Linguists team up with computer scientists to spot trends on cybercrime forums

Linguists team up with computer scientists to spot trends on cybercrim...

4 years ago 163

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Paying ransomware demands could risk US sanctions, OFAC warns

Paying ransomware demands could risk US sanctions, OFAC warns

4 years ago 147

Microsoft unveils plans for Project Zero-style Chromium research program

Microsoft unveils plans for Project Zero-style Chromium research progr...

4 years ago 135