AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks
6 min read
Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that...
Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its...
Sometimes, it turns out that the answers we struggled so hard to find were sitting right in...
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of...
Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation...
New variants of a banking malware called Grandoreiro have been found to adopt new tactics in an...
Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large
4 min read
Identity security is front, and center given all the recent breaches that include Microsoft, Okta, Cloudflare and...
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities (KEV) catalog by...
Cybersecurity researchers have shed light on a new adversarial technique that could be used to jailbreak large...
It may come as a surprise to learn that 34% of security practitioners are in the dark...
Threat actors have been observed abusing Amazon S3 (Simple Storage Service) Transfer Acceleration feature as part of...
Russian-speaking users have become the target of a new phishing campaign that leverages an open-source phishing toolkit...
Details have emerged about a now-patched security flaw in Styra's Open Policy Agent (OPA) that, if successfully...
Bad actors have been observed targeting Docker remote API servers to deploy the SRBMiner crypto miner on...
Service accounts are vital in any enterprise, running automated processes like managing applications or scripts. However, without...
Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame...
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed...
VMware has released software updates to address an already patched security flaw in vCenter Server that could...
CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack
2 min read
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic...
Pentest Checklists Are More Important Than Ever
Given the expanding attack surface coupled with the increasing sophistication of...
