all InfoSec News logo
all InfoSec News - Your InfoSec news aggregator
Log in Sign up
Everything

InfoSec / Cybersecurity

RSS
aimeos/ai-admin-graphql improper access control vulnerability allows an edito... 17 minutes ago | cve.threatint.com
access access control admin api +7
How To Avoid Being Phished - SWN Vault 20 minutes ago | sw-all.swsgtv.libsynpro.com
podcast
Arbitrary Directory Listing in Centrify PASVulnerability in Delinea Centrify ... 22 minutes ago | cve.threatint.com
application centrify delinea directory +6
Affirm says cardholders impacted by Evolve Bank data breach 23 minutes ago | www.bleepingcomputer.com
amp bank breach data +17
Rack ReDoS Vulnerability in HTTP Accept Headers ParsingRack is a modular Ruby... 23 minutes ago | cve.threatint.com
accept denial of service headers http +13
Qemu: 'qemu-img info' leads to host file read/writeA flaw was found in the QE... 23 minutes ago | cve.threatint.com
block command devices disk +12
Arbitrary File Reading in Centrify PASVulnerability in Delinea Centrify PAS v... 25 minutes ago | cve.threatint.com
application arbitrary files centrify delinea +9
Careful with your marshmallows 🔥 26 minutes ago | www.eff.org
anniversary back digital digital future +15
Broken SAML ValidationIn versions of Akana in versions prior to and including... 30 minutes ago | cve.threatint.com
saml sign single single sign-on +3
New report advises how ransomware victims can be better supported 43 minutes ago | techxplore.com
can experience experiences identify +8
Chrome Update Will Block Entrust Certificates by November 2024 50 minutes ago | www.infosecurity-magazine.com
block certificates chrome chrome update +8
RSAC Fireside Chat: Amplifier Security taps LLMs to help organizations foster a security culture 52 minutes ago | www.lastwatchdog.com
breaches chat culture cybersecurity +17
Andrew Steven Finds a Red Flag in His Dream an hour ago | loudtreemedia.com
deals digital dream estate +17
Overcoming Imposter Syndrome in Cybersecurity: Turning Negatives into Growth an hour ago | www.youtube.com
cybersecurity discover experiences fast +20
Gentoo Linux Security Advisory 202407-09 an hour ago | packetstormsecurity.com
advisory can code code execution +11
WordPress FooGallery 2.4.16 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting persistent plugin scripting +3
Improper verification of intent by broadcast receiver vulnerability in Galaxy... an hour ago | cve.threatint.com
attackers broadcast galaxy intent +5
WordPress Gallery 2.3.6 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting gallery persistent scripting +3
Ubuntu Security Notice USN-6851-2 an hour ago | packetstormsecurity.com
discovery enable fail fixes +9
Ubuntu Security Notice USN-6844-2 an hour ago | packetstormsecurity.com
configuration daemon discovery fixes +11
5 Threat Intelligence Solution Use Cases an hour ago | malware.news
assets attacks cases cyber +18
Caught in the Net: Using Infostealer Logs to Unmask CSAM Consumers an hour ago | malware.news
abuse accounts behavior caught +26
Atomic Ransomware Emulation an hour ago | www.youtube.com
access atomic can critical +14
Red Hat Security Advisory 2024-4212-03 an hour ago | packetstormsecurity.com
advisory enterprise golang linux +5
Red Hat Security Advisory 2024-4211-03 an hour ago | packetstormsecurity.com
advisory enterprise free issues +12
Red Hat Security Advisory 2024-4210-03 an hour ago | packetstormsecurity.com
advisory denial of service directory issues +9
Red Hat Security Advisory 2024-4209-03 an hour ago | packetstormsecurity.com
11.2 advisory denial of service directory +10
Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cro... an hour ago | cve.threatint.com
administrator builder calculator cost +7
PowerVR Driver Missing Sanitization an hour ago | packetstormsecurity.com
addresses buffer driver firmware +1
Keynote | Behind the Screens: Decrypting the Ransomware Diaries an hour ago | www.youtube.com
adventures build criminals diaries +11
Deploying RAGs in production — Part 1 an hour ago | malware.news
advancement applications artificial artificial intelligence +10
Pentera leads in Key Security Categories in the G2 Summer 2024 Report an hour ago | ai-techpark.com
automated automated security customer customer support +20
Ransomware Data Leak Sites: The Uncomfortable Truths an hour ago | www.youtube.com
case challenges compromised customer +18
Australia Warns Of Rogue Wi-Fi At Airports an hour ago | packetstormsecurity.com
airports australia hacker malware +2
Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug an hour ago | packetstormsecurity.com
android bug critical escalation +9
Splunk Patches High-Severity Vulnerabilities In Enterprise Product an hour ago | packetstormsecurity.com
enterprise flaw high patch +5
TeamViewer Hack Officially Attributed To Russian Cyberspies an hour ago | packetstormsecurity.com
cyberwar data loss government hack +5
Strategies for Active Defense against Pre-Ransomware and Ransomware Attacks an hour ago | www.youtube.com
active defense analyst attacks cyber +23
Almost Every Apple Device Vulnerable To CocoaPods Supply Chain Attack an hour ago | packetstormsecurity.com
apple attack backdoor device +6
Supreme Court ruling on Chevron doctrine may upend future cybersecurity regulation an hour ago | www.cybersecuritydive.com
agency challenges chevron court +21
Evolution of Ransomware Tactics in 2023: Insights from The DFIR Report an hour ago | www.youtube.com
attacks counter defensive dfir +13
WARNING: CRITICAL VULNERABILITY PATCHED IN APACHE HTTP SERVER 2.4.60, PATCH IMMEDIATELY! an hour ago | cert.be
apache critical critical vulnerability http +5
The right way to email your users an hour ago | dev.to
application build com django +17
Ransomware Running Wild in the Cloud an hour ago | www.youtube.com
access actor addresses attacks +20
I was served an Ad that featured an AI Photo of myself on Snapchat. What … an hour ago | www.reddit.com
advertisement amp can com +7
Cyber Risk Prioritization | Lansweeper an hour ago | www.lansweeper.com
cyber cyber risk cybersecurity lansweeper +3
Technical Article an hour ago | dev.to
accounts article automate automated +19
Unmasking Cyber Shadows: A Tactical Approach to Hunting Ransomware TTPs an hour ago | www.youtube.com
attack attacks breaking city +21
Remote Code Execution in parisneo/lollms-webuiparisneo/lollms-webui, in its l... an hour ago | cve.threatint.com
code code execution cpp dependency +9
OT Vulnerability Management | Lansweeper an hour ago | www.lansweeper.com
lansweeper management ot vulnerability +1
Unlocked 403 Podcast - Arsonist an hour ago | www.youtube.com
channel check cybersecurity cybersecurity expert +9
LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Una... an hour ago | cve.threatint.com
authorization check function learnpress +8
Never store your passwords & keys like this! #shorts #passwords #cybersecurity an hour ago | www.youtube.com
cybersecurity keys passwords shorts +1
Ransomware Attack Demands Reach a Staggering $5.2m in 2024 an hour ago | www.infosecurity-magazine.com
attack demand demands incidents +6
Unauthenticated RCE was Found in OpenSSH - RegreSSHion - CVE-2024-6387 an hour ago | www.youtube.com
cve cve-2024 cve-2024-6387 found +5
Gone in 120 seconds an hour ago | dev.to
abuse api api abuse article +24
Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug 2 hours ago | www.securityweek.com
android android security bug critical +17
How Patch Management Software Solves the Update Problem 2 hours ago | heimdalsecurity.com
action date far hackers +13
Predator spyware operations weakened by crackdowns 2 hours ago | www.scmagazine.com
administration alliance biden biden administration +18
Experts gather in Dublin to discuss quantum communications 2 hours ago | www.siliconrepublic.com
comms communications cyberattacks cybersecurity +15
VMware ESXi Vulnerability Allows Attackers to Bypass Authentication 6 days, 10 hours ago | cybersecuritynews.com
api api vulnerability attackers authentication +26
CrowdStrike bug maxes out 100% of CPU, requires Windows reboots 4 days, 1 hour ago | www.thestack.technology
bug bugs cpu crowdstrike +4
How did Mozilla Firefox go from being the best and most beloved browser to suddenly … 6 days, 19 hours ago | www.reddit.com
android bot browser corporate +4
Polyfill.io Supply Chain Attack 4 days, 12 hours ago | fortiguard.fortinet.com
attack browser can capabilities +11
New Mac Stealer 'Poseidon' Spreads via Arc Browser Google Ads 1 day, 22 hours ago | www.reddit.com
ads arc browser cybersecurity +5
Microsoft blamed for million-plus patient record theft at US hospital giant 6 days, 15 hours ago | www.theregister.com
american data employee giant +18
TeamViewer warns that its corporate environment was breached in a cyberattack on June 26, and … 4 days, 4 hours ago | www.techmeme.com
access attributes bleepingcomputer blizzard +16
How do I delete myself from the Internet? 6 days, 13 hours ago | www.reddit.com
can deal delete internet +5
How Avery Johnson and Warren Brodey, early members of the American Society for Cybernetics, created … 2 days, 17 hours ago | www.techmeme.com
american computing financial financial times +3
Brain Cipher Ransomware Attack 3 days, 12 hours ago | fortiguard.fortinet.com
airport attack brain centers +21
New MOVEit Auth Bypass Vulnerability Under Attack Now, Patch Immediately 6 days, 13 hours ago | cybersecuritynews.com
access attack attackers auth +34
If you're using Polyfill.io code on your site – like 100,000+ are – remove it … 6 days, 16 hours ago | www.theregister.com
cdn chinese code domain +9
Source: Microsoft told over a dozen Texas agencies and public universities that their emails were … 3 days, 16 hours ago | www.techmeme.com
bloomberg emails exposed hack +6
ChatGPT 4 can exploit 87% of one-day vulnerabilities 1 day, 3 hours ago | securityintelligence.com
artificial intelligence artificial intelligence (ai) attack can +16
Activist investor Jana Partners announces an investment in Rapid7; sources say Jana plans to push … 5 days, 20 hours ago | www.techmeme.com
cybersecurity cybersecurity company investment journal +8
Bogus: LockBit's Claimed Federal Reserve Ransomware Hit 6 days ago | www.govinfosecurity.com
action bank banking bogus +15
The importance of letting go and spending time with the family feat. Alex Chapman #bugbounty … 2 days, 5 hours ago | www.youtube.com
alex bounty bug bug bounty +11
Google to block sites using Entrust certificates in bombshell move 3 days, 22 hours ago | www.thestack.technology
block browser build certificate authority +11
Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack 6 days, 11 hours ago | thehackernews.com
ads attack block chinese +16
Get an Epic Cyber Education for Free (almost)! w/ Carrie Roberts 5 days, 22 hours ago | www.youtube.com
cyber cyber security document education +13
Creating and Managing IAM users from Your EC2 instance 2 days, 5 hours ago | dev.to
access access control connect control +11
Is it safe to let your password manager autofill your password? 11 hours ago | proton.me
autofill aware convenience easy +12
Polyfill.io JavaScript supply chain attack impacts over 100K sites 6 days, 22 hours ago | www.bleepingcomputer.com
attack chinese domain google +10
Gov launches 'overdue' cyber security network for health sector 1 day, 13 hours ago | www.itnews.com.au
cyber cyber security gov health +9
Russia-linked group APT29 likely breached TeamViewer’s corporate network 2 days, 3 hours ago | securityaffairs.co
actor apt apt29 apt group +24
Boost Your Cybersecurity with Flare's Threat Intel Platform 1 day, 23 hours ago | www.youtube.com
capabilities cyberdefense cybersecurity cybersecurity strategy +25
Microsoft Alerts More Users in Update to Midnight Blizzard Hack 1 day, 7 hours ago | gbhackers.com
alert alerts attack blizzard +20
Most passwords take a matter of minutes to crack – here’s how you can create … 6 days, 6 hours ago | www.itpro.com
breached can crack cracked +7
Dev rejects CVE severity, makes his GitHub repo read-only 2 days, 1 hour ago | www.bleepingcomputer.com
bogus cve cves dev +14
North Korean Hackers Using New ‘HappyDoor’ Malware Used In Email Attacks 5 days, 6 hours ago | cybersecuritynews.com
attachments attacks can clicking +26
Chinese Espionage Group “ChamelGang” Uses Attacks for Disruption and Data Theft 5 days, 17 hours ago | www.hackread.com
asia attacks aviation catb +21
The truth about CTFs vs real world 2 days, 16 hours ago | www.youtube.com
ctf ctfs cyber cyber security +13
Preparing for Cybersecurity Maturity Model Certification CMMC 4 days, 10 hours ago | dev.to
businesses certification cmmc compliance +12
The White House will host a conference for social media creators 3 days, 22 hours ago | techcrunch.com
administration august biden conference +26
Infosys McCamish Systems, which provides consulting, IT, and outsourcing services, says LockBit stole sensitive info … 3 days, 19 hours ago | www.techmeme.com
attack bill bleepingcomputer consulting +10
Microsoft informs customers that hackers spied on emails 3 days, 17 hours ago | www.itnews.com.au
customers emails hackers intrusion +2
TeamViewer Ties Cyberattack to Russian APT29 Group 4 days, 3 hours ago | malware.news
access account actor apt29 +20
Researchers from Qualys say a flaw in OpenSSH can allow attackers to remotely compromise servers, … 19 hours ago | www.techmeme.com
attackers can compromise cso +7
Companies in Russia supporting war targeted by Ukrainian hackers 2 days, 9 hours ago | www.reddit.com
companies cybersecurity hackers russia +2
TeamViewer breach update, HubSpot customer attacks, Cyber insurance problems 1 day, 9 hours ago | cisoseries.com
account attacks breach businesses +15
Hacker Turned CISO. Fired Multiple Times. Quality Episode 1 day, 20 hours ago | www.reddit.com
burnout business change ciso +18
How to create an SSL certificate with Let’s Encrypt 6 days, 15 hours ago | dev.to
browser can certbot certificate +16
Malicious npm package targets AWS users 6 days, 1 hour ago | securityboulevard.com
aws easy malicious malicious actors +19
Filings and DOJ officials describe how a gang threatened, assaulted, and tortured 11 victims in … 3 days, 5 hours ago | www.techmeme.com
case crypto doj extortion +3
TeamViewer Detects Security Breach in Corporate IT Environment 4 days, 10 hours ago | thehackernews.com
breach corporate cyber cyber security +17
Infinidat Revolutionizes Enterprise Cyber Storage Protection, Combats Ransomware And Malware Threats 5 days, 2 hours ago | hackernoon.com
attacks automated automation can +37
China’s ‘Velvet Ant’ hackers caught exploiting new zero-day in Cisco devices 19 hours ago | therecord.media
ant caught china cisco +7
LockBit Claims Ransomware Attack on U.S. Federal Reserve 6 days, 21 hours ago | securityboulevard.com
attack claims cloud security cybercriminals +34
Researchers Warn of Widespread Polyfill Supply Chain Attack 4 days, 21 hours ago | malware.news
attack cases cdn code +15
Learn how to Protect your Business with this $30 Cybersecurity Training 5 days, 2 hours ago | www.techrepublic.com
bundle business certification cisco +12
S3 – Episode 005 – The Great Cyber Divide (w/ The Bare Knuckles & Brass … 2 days, 15 hours ago | www.youtube.com
cyber down episode great +7
Understanding the New NIS2 Directive: Compliance for EU Businesses 6 days, 13 hours ago | www.youtube.com
bojan brian business businesses +8
Progress Software discloses a critical vulnerability in the MOVEit SFTP module; hackers exploited a similar … 5 days, 12 hours ago | www.techmeme.com
ars technica breach critical critical vulnerability +12
TeamViewer accuses Russia-linked hackers of cyberattack 3 days, 17 hours ago | www.itnews.com.au
corporate cyberattack environment hackers +3
Russia-linked Midnight Blizzard stole email of more Microsoft customers 1 day, 22 hours ago | securityaffairs.co
blizzard breaking news campaign corporate +20
APT36's cyber blitz on India. [Research Saturday] 3 days, 9 hours ago | thecyberwire.com
advanced advanced persistent threat aerospace amp +25
HubSpot says it’s investigating customer account hacks 3 days, 21 hours ago | techcrunch.com
access account accounts bad +22
Prudential Financial now says 2.5 million impacted by data breach 19 hours ago | www.bleepingcomputer.com
breach compromised data data breach +10
#Hacktivity2023 // AI Security 1 day, 17 hours ago | www.youtube.com
ai security attack conference cyber +12
My 100 Days of Code Challenge Starts Now! 2 days, 11 hours ago | dev.to
100 days of code 100daysofcode aim assessments +16

Items published with this topic over the last 90 days.

Malware Analysis, News and Indicators - Latest topics

5 Threat Intelligence Solution Use Cases an hour ago | malware.news
assets attacks cases cyber +18
Caught in the Net: Using Infostealer Logs to Unmask CSAM Consumers an hour ago | malware.news
abuse accounts behavior caught +26
Deploying RAGs in production — Part 1 an hour ago | malware.news
advancement applications artificial artificial intelligence +10

CVE | THREATINT - NEW

aimeos/ai-admin-graphql improper access control vulnerability allows an edito... 17 minutes ago | cve.threatint.com
access access control admin api +7
Arbitrary Directory Listing in Centrify PASVulnerability in Delinea Centrify ... 22 minutes ago | cve.threatint.com
application centrify delinea directory +6
Rack ReDoS Vulnerability in HTTP Accept Headers ParsingRack is a modular Ruby... 23 minutes ago | cve.threatint.com
accept denial of service headers http +13

DEV Community

The right way to email your users an hour ago | dev.to
application build com django +17
Technical Article an hour ago | dev.to
accounts article automate automated +19
Gone in 120 seconds an hour ago | dev.to
abuse api api abuse article +24

cs.CR updates on arXiv.org

Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory 12 hours ago | arxiv.org
ai assistants arxiv can contextual +21
On the evolution of data breach reporting patterns and frequency in the United States: a … 12 hours ago | arxiv.org
analysis arxiv breach breaches +23
Cross-silo Federated Learning with Record-level Personalized Differential Privacy 12 hours ago | arxiv.org
arxiv budget client clients +19

Packet Storm

Gentoo Linux Security Advisory 202407-09 an hour ago | packetstormsecurity.com
advisory can code code execution +11
WordPress FooGallery 2.4.16 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting persistent plugin scripting +3
WordPress Gallery 2.3.6 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting gallery persistent scripting +3

Privacy & Freedom in the Information Age

I was served an Ad that featured an AI Photo of myself on Snapchat. What … an hour ago | www.reddit.com
advertisement amp can com +7
People in San Francisco Are Mad That a New App Lets You Spy on Bars … 3 hours ago | www.reddit.com
app francisco people privacy +3
Google Crome - Ad Audience Targeting Baked Into Browser Binaries 5 hours ago | www.reddit.com
apis browser chrome chromium +11

cybersecurity

New campaign uses malware ‘cluster bomb’ to effect maximum impact 3 hours ago | www.reddit.com
bomb campaign cluster cybersecurity +3
Challenges in Tabletop exercises? 6 hours ago | www.reddit.com
awareness challenges cyber cyber security +16
Phishing Attacks - Underestimated effect of Internationalised domain names 7 hours ago | www.reddit.com
attacks cybersecurity domain domain names +4

Security Boulevard

It’s World UFO Day! Defend Against Unidentified File Objects (UFOs) with Votiro 3 hours ago | securityboulevard.com
blog file security security boulevard +4
A Deep Dive into the EU Cybersecurity Certification Scheme on Common Criteria (EUCC) 3 hours ago | securityboulevard.com
agency blog posts bolster central +14
Best Parental Control App for Parents in 2024 3 hours ago | securityboulevard.com
advanced alerts app apps +16

Cyber Security News

CocoaPods Vulnerability Exposes iOS & macOS Apps To Supply Chain Attacks 3 hours ago | cybersecuritynews.com
actor app apple apps +25
Intel CPU Vulnerability: Indirector Injection Attack Leads to Sensitive Data Leak 3 hours ago | cybersecuritynews.com
alder lake attack buffer california +27
How Restricting Access to Resources Improves Cyber Security 5 hours ago | cybersecuritynews.com
access access controls breaches can +16

IACR News

Securely Training Decision Trees Efficiently 6 hours ago | www.iacr.org
algorithms class contribute data +18
A More Compact AES, and More 6 hours ago | www.iacr.org
aes algebra ciphers compute +4
TaSSLE: Lasso for the commitment-phobic 6 hours ago | www.iacr.org
argument commit construction daniel +8

BleepingComputer

Affirm says cardholders impacted by Evolve Bank data breach 23 minutes ago | www.bleepingcomputer.com
amp bank breach data +17
Google Pixel 6 series phones bricked after factory reset 2 hours ago | www.bleepingcomputer.com
bricked devices factory google +10
Prudential Financial now says 2.5 million impacted by data breach 19 hours ago | www.bleepingcomputer.com
breach compromised data data breach +10

Biometric Update

Totm upgrades the ABIS platform for improved speed and accuracy 21 hours ago | www.biometricupdate.com
abis accuracy advanced algorithms +18
Many factors make good digital ID planning and procurement 21 hours ago | www.biometricupdate.com
access biometrics biometrics news breaches +31
New details revealed about Zimbabwe biometric voting procurement scandal 22 hours ago | www.biometricupdate.com
africa biometric biometrics biometrics news +15

GovInfoSecurity.com RSS Syndication

Groups Ask HHS for Guidance on Massive Change Breach Reports 17 hours ago | www.govinfosecurity.com
ask breach breach notifications change +16
Urgent: Patch Fixed, Reintroduced OpenSSH Bug, Says Qualys 20 hours ago | www.govinfosecurity.com
bug can file file transfer +16
Purple Teaming: Evaluate the Efficacy of Security Controls 22 hours ago | www.govinfosecurity.com
atomic cases control controls +11

GBHackers On Security

Hackers Using Polyglot Files In the Wild, Here Comes PolyConv For Detection 2 hours ago | gbhackers.com
analysis and response calling can +27
Google to offer $250,000 for Full VM Escape Zero-day Vulnerability 3 hours ago | gbhackers.com
android cyber security escape foundational +23
CapraRAT Mimics As Popular Android Apps Attacking Android Users 6 hours ago | gbhackers.com
android android apps android security android users +25

Cyber Security – AI-TechPark

Pentera leads in Key Security Categories in the G2 Summer 2024 Report an hour ago | ai-techpark.com
automated automated security customer customer support +20
Chetu achieves 14th Consecutive Type 2 SOC 1® Certification 5 hours ago | ai-techpark.com
audit certification client controls +19
Binary Defense named in 2024 Gartner® Market Guide for MDR for 6th Year 7 hours ago | ai-techpark.com
and response binary binary defense defense +16

Techmeme

A look at the national security fears around Microsoft's deal with Abu Dhabi's G42, including … 5 hours ago | www.techmeme.com
abu dhabi bloomberg china deal +9
Wise, Affirm, Mercury, and other companies say they're investigating how a recent ransomware attack by … 17 hours ago | www.techmeme.com
attack bank companies customers +12
Researchers from Qualys say a flaw in OpenSSH can allow attackers to remotely compromise servers, … 19 hours ago | www.techmeme.com
attackers can compromise cso +7

Latest

aimeos/ai-admin-graphql improper access control vulnerability allows an edito... 17 minutes ago | cve.threatint.com
access access control admin api +7
How To Avoid Being Phished - SWN Vault 20 minutes ago | sw-all.swsgtv.libsynpro.com
podcast
Arbitrary Directory Listing in Centrify PASVulnerability in Delinea Centrify ... 22 minutes ago | cve.threatint.com
application centrify delinea directory +6
Affirm says cardholders impacted by Evolve Bank data breach 23 minutes ago | www.bleepingcomputer.com
amp bank breach data +17
Rack ReDoS Vulnerability in HTTP Accept Headers ParsingRack is a modular Ruby... 23 minutes ago | cve.threatint.com
accept denial of service headers http +13
Qemu: 'qemu-img info' leads to host file read/writeA flaw was found in the QE... 23 minutes ago | cve.threatint.com
block command devices disk +12
Arbitrary File Reading in Centrify PASVulnerability in Delinea Centrify PAS v... 25 minutes ago | cve.threatint.com
application arbitrary files centrify delinea +9
Careful with your marshmallows 🔥 26 minutes ago | www.eff.org
anniversary back digital digital future +15
Broken SAML ValidationIn versions of Akana in versions prior to and including... 30 minutes ago | cve.threatint.com
saml sign single single sign-on +3
New report advises how ransomware victims can be better supported 43 minutes ago | techxplore.com
can experience experiences identify +8
Chrome Update Will Block Entrust Certificates by November 2024 50 minutes ago | www.infosecurity-magazine.com
block certificates chrome chrome update +8
RSAC Fireside Chat: Amplifier Security taps LLMs to help organizations foster a security culture 52 minutes ago | www.lastwatchdog.com
breaches chat culture cybersecurity +17
Andrew Steven Finds a Red Flag in His Dream an hour ago | loudtreemedia.com
deals digital dream estate +17
Overcoming Imposter Syndrome in Cybersecurity: Turning Negatives into Growth an hour ago | www.youtube.com
cybersecurity discover experiences fast +20
Gentoo Linux Security Advisory 202407-09 an hour ago | packetstormsecurity.com
advisory can code code execution +11
WordPress FooGallery 2.4.16 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting persistent plugin scripting +3
Improper verification of intent by broadcast receiver vulnerability in Galaxy... an hour ago | cve.threatint.com
attackers broadcast galaxy intent +5
WordPress Gallery 2.3.6 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting gallery persistent scripting +3
Ubuntu Security Notice USN-6851-2 an hour ago | packetstormsecurity.com
discovery enable fail fixes +9
Ubuntu Security Notice USN-6844-2 an hour ago | packetstormsecurity.com
configuration daemon discovery fixes +11
5 Threat Intelligence Solution Use Cases an hour ago | malware.news
assets attacks cases cyber +18
Caught in the Net: Using Infostealer Logs to Unmask CSAM Consumers an hour ago | malware.news
abuse accounts behavior caught +26
Atomic Ransomware Emulation an hour ago | www.youtube.com
access atomic can critical +14
Red Hat Security Advisory 2024-4212-03 an hour ago | packetstormsecurity.com
advisory enterprise golang linux +5
Red Hat Security Advisory 2024-4211-03 an hour ago | packetstormsecurity.com
advisory enterprise free issues +12
Red Hat Security Advisory 2024-4210-03 an hour ago | packetstormsecurity.com
advisory denial of service directory issues +9
Red Hat Security Advisory 2024-4209-03 an hour ago | packetstormsecurity.com
11.2 advisory denial of service directory +10
Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cro... an hour ago | cve.threatint.com
administrator builder calculator cost +7
PowerVR Driver Missing Sanitization an hour ago | packetstormsecurity.com
addresses buffer driver firmware +1
Keynote | Behind the Screens: Decrypting the Ransomware Diaries an hour ago | www.youtube.com
adventures build criminals diaries +11
Deploying RAGs in production — Part 1 an hour ago | malware.news
advancement applications artificial artificial intelligence +10
Pentera leads in Key Security Categories in the G2 Summer 2024 Report an hour ago | ai-techpark.com
automated automated security customer customer support +20
Ransomware Data Leak Sites: The Uncomfortable Truths an hour ago | www.youtube.com
case challenges compromised customer +18
Australia Warns Of Rogue Wi-Fi At Airports an hour ago | packetstormsecurity.com
airports australia hacker malware +2
Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug an hour ago | packetstormsecurity.com
android bug critical escalation +9
Splunk Patches High-Severity Vulnerabilities In Enterprise Product an hour ago | packetstormsecurity.com
enterprise flaw high patch +5
TeamViewer Hack Officially Attributed To Russian Cyberspies an hour ago | packetstormsecurity.com
cyberwar data loss government hack +5
Strategies for Active Defense against Pre-Ransomware and Ransomware Attacks an hour ago | www.youtube.com
active defense analyst attacks cyber +23
Almost Every Apple Device Vulnerable To CocoaPods Supply Chain Attack an hour ago | packetstormsecurity.com
apple attack backdoor device +6
Supreme Court ruling on Chevron doctrine may upend future cybersecurity regulation an hour ago | www.cybersecuritydive.com
agency challenges chevron court +21
Evolution of Ransomware Tactics in 2023: Insights from The DFIR Report an hour ago | www.youtube.com
attacks counter defensive dfir +13
WARNING: CRITICAL VULNERABILITY PATCHED IN APACHE HTTP SERVER 2.4.60, PATCH IMMEDIATELY! an hour ago | cert.be
apache critical critical vulnerability http +5
The right way to email your users an hour ago | dev.to
application build com django +17
Ransomware Running Wild in the Cloud an hour ago | www.youtube.com
access actor addresses attacks +20
I was served an Ad that featured an AI Photo of myself on Snapchat. What … an hour ago | www.reddit.com
advertisement amp can com +7
Cyber Risk Prioritization | Lansweeper an hour ago | www.lansweeper.com
cyber cyber risk cybersecurity lansweeper +3
Technical Article an hour ago | dev.to
accounts article automate automated +19
Unmasking Cyber Shadows: A Tactical Approach to Hunting Ransomware TTPs an hour ago | www.youtube.com
attack attacks breaking city +21
Remote Code Execution in parisneo/lollms-webuiparisneo/lollms-webui, in its l... an hour ago | cve.threatint.com
code code execution cpp dependency +9
OT Vulnerability Management | Lansweeper an hour ago | www.lansweeper.com
lansweeper management ot vulnerability +1
Unlocked 403 Podcast - Arsonist an hour ago | www.youtube.com
channel check cybersecurity cybersecurity expert +9
LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Una... an hour ago | cve.threatint.com
authorization check function learnpress +8
Never store your passwords & keys like this! #shorts #passwords #cybersecurity an hour ago | www.youtube.com
cybersecurity keys passwords shorts +1
Ransomware Attack Demands Reach a Staggering $5.2m in 2024 an hour ago | www.infosecurity-magazine.com
attack demand demands incidents +6
Unauthenticated RCE was Found in OpenSSH - RegreSSHion - CVE-2024-6387 an hour ago | www.youtube.com
cve cve-2024 cve-2024-6387 found +5
Gone in 120 seconds an hour ago | dev.to
abuse api api abuse article +24
Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug 2 hours ago | www.securityweek.com
android android security bug critical +17
How Patch Management Software Solves the Update Problem 2 hours ago | heimdalsecurity.com
action date far hackers +13
Predator spyware operations weakened by crackdowns 2 hours ago | www.scmagazine.com
administration alliance biden biden administration +18
Experts gather in Dublin to discuss quantum communications 2 hours ago | www.siliconrepublic.com
comms communications cyberattacks cybersecurity +15

Top (last 7 days)

VMware ESXi Vulnerability Allows Attackers to Bypass Authentication 6 days, 10 hours ago | cybersecuritynews.com
api api vulnerability attackers authentication +26
CrowdStrike bug maxes out 100% of CPU, requires Windows reboots 4 days, 1 hour ago | www.thestack.technology
bug bugs cpu crowdstrike +4
How did Mozilla Firefox go from being the best and most beloved browser to suddenly … 6 days, 19 hours ago | www.reddit.com
android bot browser corporate +4
Polyfill.io Supply Chain Attack 4 days, 12 hours ago | fortiguard.fortinet.com
attack browser can capabilities +11
New Mac Stealer 'Poseidon' Spreads via Arc Browser Google Ads 1 day, 22 hours ago | www.reddit.com
ads arc browser cybersecurity +5
Microsoft blamed for million-plus patient record theft at US hospital giant 6 days, 15 hours ago | www.theregister.com
american data employee giant +18
TeamViewer warns that its corporate environment was breached in a cyberattack on June 26, and … 4 days, 4 hours ago | www.techmeme.com
access attributes bleepingcomputer blizzard +16
How do I delete myself from the Internet? 6 days, 13 hours ago | www.reddit.com
can deal delete internet +5
How Avery Johnson and Warren Brodey, early members of the American Society for Cybernetics, created … 2 days, 17 hours ago | www.techmeme.com
american computing financial financial times +3
Brain Cipher Ransomware Attack 3 days, 12 hours ago | fortiguard.fortinet.com
airport attack brain centers +21
New MOVEit Auth Bypass Vulnerability Under Attack Now, Patch Immediately 6 days, 13 hours ago | cybersecuritynews.com
access attack attackers auth +34
If you're using Polyfill.io code on your site – like 100,000+ are – remove it … 6 days, 16 hours ago | www.theregister.com
cdn chinese code domain +9
Source: Microsoft told over a dozen Texas agencies and public universities that their emails were … 3 days, 16 hours ago | www.techmeme.com
bloomberg emails exposed hack +6
ChatGPT 4 can exploit 87% of one-day vulnerabilities 1 day, 3 hours ago | securityintelligence.com
artificial intelligence artificial intelligence (ai) attack can +16
Activist investor Jana Partners announces an investment in Rapid7; sources say Jana plans to push … 5 days, 20 hours ago | www.techmeme.com
cybersecurity cybersecurity company investment journal +8
Bogus: LockBit's Claimed Federal Reserve Ransomware Hit 6 days ago | www.govinfosecurity.com
action bank banking bogus +15
The importance of letting go and spending time with the family feat. Alex Chapman #bugbounty … 2 days, 5 hours ago | www.youtube.com
alex bounty bug bug bounty +11
Google to block sites using Entrust certificates in bombshell move 3 days, 22 hours ago | www.thestack.technology
block browser build certificate authority +11
Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack 6 days, 11 hours ago | thehackernews.com
ads attack block chinese +16
Get an Epic Cyber Education for Free (almost)! w/ Carrie Roberts 5 days, 22 hours ago | www.youtube.com
cyber cyber security document education +13
Creating and Managing IAM users from Your EC2 instance 2 days, 5 hours ago | dev.to
access access control connect control +11
Is it safe to let your password manager autofill your password? 11 hours ago | proton.me
autofill aware convenience easy +12
Polyfill.io JavaScript supply chain attack impacts over 100K sites 6 days, 22 hours ago | www.bleepingcomputer.com
attack chinese domain google +10
Gov launches 'overdue' cyber security network for health sector 1 day, 13 hours ago | www.itnews.com.au
cyber cyber security gov health +9
Russia-linked group APT29 likely breached TeamViewer’s corporate network 2 days, 3 hours ago | securityaffairs.co
actor apt apt29 apt group +24
Boost Your Cybersecurity with Flare's Threat Intel Platform 1 day, 23 hours ago | www.youtube.com
capabilities cyberdefense cybersecurity cybersecurity strategy +25
Microsoft Alerts More Users in Update to Midnight Blizzard Hack 1 day, 7 hours ago | gbhackers.com
alert alerts attack blizzard +20
Most passwords take a matter of minutes to crack – here’s how you can create … 6 days, 6 hours ago | www.itpro.com
breached can crack cracked +7
Dev rejects CVE severity, makes his GitHub repo read-only 2 days, 1 hour ago | www.bleepingcomputer.com
bogus cve cves dev +14
North Korean Hackers Using New ‘HappyDoor’ Malware Used In Email Attacks 5 days, 6 hours ago | cybersecuritynews.com
attachments attacks can clicking +26
Chinese Espionage Group “ChamelGang” Uses Attacks for Disruption and Data Theft 5 days, 17 hours ago | www.hackread.com
asia attacks aviation catb +21
The truth about CTFs vs real world 2 days, 16 hours ago | www.youtube.com
ctf ctfs cyber cyber security +13
Preparing for Cybersecurity Maturity Model Certification CMMC 4 days, 10 hours ago | dev.to
businesses certification cmmc compliance +12
The White House will host a conference for social media creators 3 days, 22 hours ago | techcrunch.com
administration august biden conference +26
Infosys McCamish Systems, which provides consulting, IT, and outsourcing services, says LockBit stole sensitive info … 3 days, 19 hours ago | www.techmeme.com
attack bill bleepingcomputer consulting +10
Microsoft informs customers that hackers spied on emails 3 days, 17 hours ago | www.itnews.com.au
customers emails hackers intrusion +2
TeamViewer Ties Cyberattack to Russian APT29 Group 4 days, 3 hours ago | malware.news
access account actor apt29 +20
Researchers from Qualys say a flaw in OpenSSH can allow attackers to remotely compromise servers, … 19 hours ago | www.techmeme.com
attackers can compromise cso +7
Companies in Russia supporting war targeted by Ukrainian hackers 2 days, 9 hours ago | www.reddit.com
companies cybersecurity hackers russia +2
TeamViewer breach update, HubSpot customer attacks, Cyber insurance problems 1 day, 9 hours ago | cisoseries.com
account attacks breach businesses +15
Hacker Turned CISO. Fired Multiple Times. Quality Episode 1 day, 20 hours ago | www.reddit.com
burnout business change ciso +18
How to create an SSL certificate with Let’s Encrypt 6 days, 15 hours ago | dev.to
browser can certbot certificate +16
Malicious npm package targets AWS users 6 days, 1 hour ago | securityboulevard.com
aws easy malicious malicious actors +19
Filings and DOJ officials describe how a gang threatened, assaulted, and tortured 11 victims in … 3 days, 5 hours ago | www.techmeme.com
case crypto doj extortion +3
TeamViewer Detects Security Breach in Corporate IT Environment 4 days, 10 hours ago | thehackernews.com
breach corporate cyber cyber security +17
Infinidat Revolutionizes Enterprise Cyber Storage Protection, Combats Ransomware And Malware Threats 5 days, 2 hours ago | hackernoon.com
attacks automated automation can +37
China’s ‘Velvet Ant’ hackers caught exploiting new zero-day in Cisco devices 19 hours ago | therecord.media
ant caught china cisco +7
LockBit Claims Ransomware Attack on U.S. Federal Reserve 6 days, 21 hours ago | securityboulevard.com
attack claims cloud security cybercriminals +34
Researchers Warn of Widespread Polyfill Supply Chain Attack 4 days, 21 hours ago | malware.news
attack cases cdn code +15
Learn how to Protect your Business with this $30 Cybersecurity Training 5 days, 2 hours ago | www.techrepublic.com
bundle business certification cisco +12
S3 – Episode 005 – The Great Cyber Divide (w/ The Bare Knuckles & Brass … 2 days, 15 hours ago | www.youtube.com
cyber down episode great +7
Understanding the New NIS2 Directive: Compliance for EU Businesses 6 days, 13 hours ago | www.youtube.com
bojan brian business businesses +8
Progress Software discloses a critical vulnerability in the MOVEit SFTP module; hackers exploited a similar … 5 days, 12 hours ago | www.techmeme.com
ars technica breach critical critical vulnerability +12
TeamViewer accuses Russia-linked hackers of cyberattack 3 days, 17 hours ago | www.itnews.com.au
corporate cyberattack environment hackers +3
Russia-linked Midnight Blizzard stole email of more Microsoft customers 1 day, 22 hours ago | securityaffairs.co
blizzard breaking news campaign corporate +20
APT36's cyber blitz on India. [Research Saturday] 3 days, 9 hours ago | thecyberwire.com
advanced advanced persistent threat aerospace amp +25
HubSpot says it’s investigating customer account hacks 3 days, 21 hours ago | techcrunch.com
access account accounts bad +22
Prudential Financial now says 2.5 million impacted by data breach 19 hours ago | www.bleepingcomputer.com
breach compromised data data breach +10
#Hacktivity2023 // AI Security 1 day, 17 hours ago | www.youtube.com
ai security attack conference cyber +12
My 100 Days of Code Challenge Starts Now! 2 days, 11 hours ago | dev.to
100 days of code 100daysofcode aim assessments +16

Top sources (last 7 days)

Malware Analysis, News and Indicators - Latest topics

5 Threat Intelligence Solution Use Cases an hour ago | malware.news
assets attacks cases cyber +18
Caught in the Net: Using Infostealer Logs to Unmask CSAM Consumers an hour ago | malware.news
abuse accounts behavior caught +26
Deploying RAGs in production — Part 1 an hour ago | malware.news
advancement applications artificial artificial intelligence +10

CVE | THREATINT - NEW

aimeos/ai-admin-graphql improper access control vulnerability allows an edito... 17 minutes ago | cve.threatint.com
access access control admin api +7
Arbitrary Directory Listing in Centrify PASVulnerability in Delinea Centrify ... 22 minutes ago | cve.threatint.com
application centrify delinea directory +6
Rack ReDoS Vulnerability in HTTP Accept Headers ParsingRack is a modular Ruby... 23 minutes ago | cve.threatint.com
accept denial of service headers http +13

DEV Community

The right way to email your users an hour ago | dev.to
application build com django +17
Technical Article an hour ago | dev.to
accounts article automate automated +19
Gone in 120 seconds an hour ago | dev.to
abuse api api abuse article +24

cs.CR updates on arXiv.org

Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory 12 hours ago | arxiv.org
ai assistants arxiv can contextual +21
On the evolution of data breach reporting patterns and frequency in the United States: a … 12 hours ago | arxiv.org
analysis arxiv breach breaches +23
Cross-silo Federated Learning with Record-level Personalized Differential Privacy 12 hours ago | arxiv.org
arxiv budget client clients +19

Packet Storm

Gentoo Linux Security Advisory 202407-09 an hour ago | packetstormsecurity.com
advisory can code code execution +11
WordPress FooGallery 2.4.16 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting persistent plugin scripting +3
WordPress Gallery 2.3.6 Cross Site Scripting an hour ago | packetstormsecurity.com
cross site scripting gallery persistent scripting +3

Privacy & Freedom in the Information Age

I was served an Ad that featured an AI Photo of myself on Snapchat. What … an hour ago | www.reddit.com
advertisement amp can com +7
People in San Francisco Are Mad That a New App Lets You Spy on Bars … 3 hours ago | www.reddit.com
app francisco people privacy +3
Google Crome - Ad Audience Targeting Baked Into Browser Binaries 5 hours ago | www.reddit.com
apis browser chrome chromium +11

cybersecurity

New campaign uses malware ‘cluster bomb’ to effect maximum impact 3 hours ago | www.reddit.com
bomb campaign cluster cybersecurity +3
Challenges in Tabletop exercises? 6 hours ago | www.reddit.com
awareness challenges cyber cyber security +16
Phishing Attacks - Underestimated effect of Internationalised domain names 7 hours ago | www.reddit.com
attacks cybersecurity domain domain names +4

Security Boulevard

It’s World UFO Day! Defend Against Unidentified File Objects (UFOs) with Votiro 3 hours ago | securityboulevard.com
blog file security security boulevard +4
A Deep Dive into the EU Cybersecurity Certification Scheme on Common Criteria (EUCC) 3 hours ago | securityboulevard.com
agency blog posts bolster central +14
Best Parental Control App for Parents in 2024 3 hours ago | securityboulevard.com
advanced alerts app apps +16

Cyber Security News

CocoaPods Vulnerability Exposes iOS & macOS Apps To Supply Chain Attacks 3 hours ago | cybersecuritynews.com
actor app apple apps +25
Intel CPU Vulnerability: Indirector Injection Attack Leads to Sensitive Data Leak 3 hours ago | cybersecuritynews.com
alder lake attack buffer california +27
How Restricting Access to Resources Improves Cyber Security 5 hours ago | cybersecuritynews.com
access access controls breaches can +16

IACR News

Securely Training Decision Trees Efficiently 6 hours ago | www.iacr.org
algorithms class contribute data +18
A More Compact AES, and More 6 hours ago | www.iacr.org
aes algebra ciphers compute +4
TaSSLE: Lasso for the commitment-phobic 6 hours ago | www.iacr.org
argument commit construction daniel +8

BleepingComputer

Affirm says cardholders impacted by Evolve Bank data breach 23 minutes ago | www.bleepingcomputer.com
amp bank breach data +17
Google Pixel 6 series phones bricked after factory reset 2 hours ago | www.bleepingcomputer.com
bricked devices factory google +10
Prudential Financial now says 2.5 million impacted by data breach 19 hours ago | www.bleepingcomputer.com
breach compromised data data breach +10

Biometric Update

Totm upgrades the ABIS platform for improved speed and accuracy 21 hours ago | www.biometricupdate.com
abis accuracy advanced algorithms +18
Many factors make good digital ID planning and procurement 21 hours ago | www.biometricupdate.com
access biometrics biometrics news breaches +31
New details revealed about Zimbabwe biometric voting procurement scandal 22 hours ago | www.biometricupdate.com
africa biometric biometrics biometrics news +15

GovInfoSecurity.com RSS Syndication

Groups Ask HHS for Guidance on Massive Change Breach Reports 17 hours ago | www.govinfosecurity.com
ask breach breach notifications change +16
Urgent: Patch Fixed, Reintroduced OpenSSH Bug, Says Qualys 20 hours ago | www.govinfosecurity.com
bug can file file transfer +16
Purple Teaming: Evaluate the Efficacy of Security Controls 22 hours ago | www.govinfosecurity.com
atomic cases control controls +11

GBHackers On Security

Hackers Using Polyglot Files In the Wild, Here Comes PolyConv For Detection 2 hours ago | gbhackers.com
analysis and response calling can +27
Google to offer $250,000 for Full VM Escape Zero-day Vulnerability 3 hours ago | gbhackers.com
android cyber security escape foundational +23
CapraRAT Mimics As Popular Android Apps Attacking Android Users 6 hours ago | gbhackers.com
android android apps android security android users +25

Cyber Security – AI-TechPark

Pentera leads in Key Security Categories in the G2 Summer 2024 Report an hour ago | ai-techpark.com
automated automated security customer customer support +20
Chetu achieves 14th Consecutive Type 2 SOC 1® Certification 5 hours ago | ai-techpark.com
audit certification client controls +19
Binary Defense named in 2024 Gartner® Market Guide for MDR for 6th Year 7 hours ago | ai-techpark.com
and response binary binary defense defense +16

Techmeme

A look at the national security fears around Microsoft's deal with Abu Dhabi's G42, including … 5 hours ago | www.techmeme.com
abu dhabi bloomberg china deal +9
Wise, Affirm, Mercury, and other companies say they're investigating how a recent ransomware attack by … 17 hours ago | www.techmeme.com
attack bank companies customers +12
Researchers from Qualys say a flaw in OpenSSH can allow attackers to remotely compromise servers, … 19 hours ago | www.techmeme.com
attackers can compromise cso +7

Jobs in InfoSec / Cybersecurity

Find Talent

Head of IT Governance IT Risk IT Outsourcing

@ State Street | Munich, Germany
View on infosec-jobs.com

Information Assurance Engineer (Engineer Info Assurance 3) 19608

@ HII | Annapolis Junction, MD, Maryland, United States
View on infosec-jobs.com

VP control design and Development

@ State Street | Dublin 2, Ireland
View on infosec-jobs.com

Channel & Alliances Solution Architect

@ Trend Micro | US Off-Site
View on infosec-jobs.com

Senior DevOps Engineer (f/m/d)

@ E.ON | Essen, DE
View on infosec-jobs.com

DevOps Engineer with OpenShift & Kubernetes

@ Peraton | Arlington, VA, United States
View on infosec-jobs.com