General cybersecurity news and analysis
Discover how 74% of teen boys are unaware of sextortion risks, highlighting the urgent need for awareness and prevention strategies.
A critical Next.js vulnerability allows attackers to bypass middleware authorization, exposing applications to unauthorized access and potential data breaches.
Google account hijackers are using Semrush ads to target victims, exploiting vulnerabilities to gain unauthorized access and steal personal information.
China bans mandatory facial recognition in private spaces like hotel rooms, enhancing privacy rights and limiting surveillance in personal areas.
Oracle Cloud refutes allegations of a data breach affecting its login servers, asserting the integrity and security of its systems remain intact.
Explore the misuse of Microsoft Trusted Signing Service for malware code-signing, highlighting security risks and implications for software integrity.
Cloudflare blocks all unencrypted traffic to API endpoints, enhancing security and protecting sensitive data from potential threats.
Former NSA Chief reveals that improved election security measures effectively deterred Russian interference in U.S. elections, ensuring democratic integrity.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Coinbase suffers a GitHub Actions supply chain attack, compromising CI/CD secrets in 218 repositories, raising security concerns.
Explore how Coinbase became the primary target in recent GitHub Actions security breaches, highlighting vulnerabilities and implications for developers.
China implements federal strategies to enhance cybersecurity, addressing rising threats and safeguarding national security through comprehensive measures.
Oracle denies claims of a data breach involving 6 million records, asserting that no evidence supports the hacker’s allegations.
Explore the Google-Wiz partnership, a strategic alliance aimed at challenging Microsoft Defender’s dominance in the cybersecurity landscape.
Chinese hackers exploit unpatched vulnerabilities in Taiwanese servers, highlighting the urgent need for enhanced cybersecurity measures.
“Discover the latest crackdown on phishing-driven tap-to-pay fraud schemes, protecting consumers and enhancing digital payment security.”
Discover how the integration of EDR and MDR enhances cybersecurity, providing robust threat detection and response for modern digital environments.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Microsoft Exchange Online bug mistakenly quarantines user emails, causing disruptions in communication and access to important messages.
Beware of deceptive Semrush ads targeting SEO experts, aiming to hijack Google accounts. Stay informed to protect your online presence.
“DOGE faces barriers in accessing Social Security data over privacy concerns, highlighting the ongoing tension between cryptocurrency and personal data protection.”
Albabat Ransomware targets Linux and macOS systems, expanding its reach and posing new threats to users and organizations across multiple platforms.
Discover Fortinet’s proactive strategy to combat ransomware by ensuring device security through timely patches and robust cybersecurity measures.
Explore the $32B Google acquisition and its implications for cloud security, highlighting potential impacts on industry standards and data protection strategies.
UAT-5918 targets Taiwan’s critical infrastructure using web shells and open-source tools, highlighting vulnerabilities in cybersecurity defenses.
Medusa Ransomware uses a malicious driver and stolen certificates to evade anti-malware defenses, enhancing its threat to cybersecurity.