General cybersecurity news and analysis
Vulnerabilities in WP Ultimate CSV Importer expose 20,000 websites to security risks, urging immediate updates to protect sensitive data.
Explore effective strategies for securing NHL teams, arenas, and cloud infrastructure to ensure safety and resilience in the face of evolving threats.
Lucid PhaaS reaches 169 targets in 88 countries using iMessage and RCS smishing, showcasing innovative communication strategies.
“Discover the surge of nearly 24,000 IPs targeting Palo Alto GlobalProtect with extensive scanning activities, highlighting cybersecurity threats.”
Google unveils simplified end-to-end encryption for Gmail business accounts, enhancing security and privacy for sensitive communications.
Apple releases critical zero-day patches for older iPhones and Macs, addressing security vulnerabilities to protect users from potential threats.
Discover how a new phishing threat combines vishing and DLL sideloading tactics, enhancing cyberattack effectiveness and evading detection.
Google enhances Gmail’s security with simplified end-to-end encryption, now accessible for Outlook users, ensuring private and secure email communication.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Google is set to roll out end-to-end encryption for all Gmail users, enhancing security and privacy for email communications.
Apple has issued urgent patches for critical 0-day vulnerabilities affecting older iOS and macOS devices, ensuring user security and device integrity.
Discover the exploitation of a critical authentication bypass vulnerability in CrushFTP, highlighting risks and mitigation strategies for users.
UK introduces new cybersecurity legislation imposing £100K daily fines for non-compliance, aiming to enhance digital security and protect sensitive data.
Cybercriminals are increasingly using lookalike domains to launch email attacks, tricking users into revealing sensitive information. Stay vigilant!
Explore essential mobile security protocols for border crossings to ensure safe data transmission and protect sensitive information during travel.
Discover 46 major vulnerabilities in solar power systems identified by Sungrow, Growatt, and SMA, highlighting critical security concerns.
Explore how a global retailer inadvertently exposed CSRF tokens to Facebook, highlighting security vulnerabilities and lessons learned in web application safety.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
China-linked Earth Alux utilizes VARGEIT and COBEACON for sophisticated cyber intrusions, highlighting advanced tactics in digital espionage.
Coordinated login scan campaign targets PAN-OS GlobalProtect, impacting nearly 24,000 IPs, highlighting security vulnerabilities and risks.
Apple fixes critical vulnerabilities in legacy iOS and macOS devices, enhancing security and protecting users from potential threats.
New Cyber Security Bill set to affect 1,000 UK companies, enhancing regulations and compliance measures to strengthen national cybersecurity.
GCHQ intern faces prison for taking a top-secret spy tool home, raising concerns over security breaches and the handling of sensitive information.
“Leading cybersecurity expert and spouse vanish during FBI home raids, raising concerns and speculation in the tech and security communities.”
Discover how Broadcom URL redirects can cause VMware Workstation auto-update issues and learn effective solutions to resolve them.
Oracle Cloud faces backlash for allegedly removing evidence related to security issues, raising concerns about transparency and accountability in IT practices.