Tag: software security
62 articles
Trump’s Bold Cybersecurity Overhaul via Executive Order
Trump’s Executive Order launches a bold cybersecurity overhaul to fortify digital defenses and modernize federal systems against evolving cyber threats.
Code Transparency: Unveiling the Secret to Strong Security
Unlock robust security by revealing hidden vulnerabilities through code transparency, ensuring precise risk management and flawless system integrity.
Firefox Addresses Two Critical Zero-Day Exploits at Pwn2Own Berlin with a $100K Reward
Firefox patches two critical zero-day vulnerabilities at Pwn2Own Berlin, awarding a $100K bounty to fortify its browser against emerging threats.
Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks
Researchers reveal new Intel CPU vulnerabilities that enable memory leaks and Spectre v2 attacks, prompting urgent security patches.
Unicode Camouflage: How a Malicious NPM Package Evades Detection
Discover how a malicious NPM package uses Unicode camouflage to evade detection by hiding harmful code within secure-looking modules.
Commvault Resolves Major Command Center Vulnerability Following Flaw Alert
Commvault resolves critical Command Center vulnerability after flaw alert, reinforcing security measures and safeguarding vital data integrity.
ASUS DriverHub Vulnerability Enables Malicious Websites to Execute Commands with Admin Rights
ASUS DriverHub vulnerability lets malicious websites run admin-level commands, exposing systems to severe security risks.
Britain’s cyber agents and industry clash over how to tackle shoddy software
Britain’s cyber agents and tech industry clash over shoddy software. Debate intensifies as both sides push for tougher cybersecurity standards.
Researchers Discover Malware in Bogus Discord PyPI Package Accumulating Over 11,500 Downloads
Researchers uncovered malware in a fake Discord PyPI package, racking up over 11,500 downloads and sparking significant cybersecurity alerts.
Malicious PyPI packages abuse Gmail, websockets to hijack systems
Malicious PyPI packages exploit Gmail and websockets to hijack systems, raising cybersecurity concerns and necessitating enhanced threat detection mechanisms.
Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely
Critical Commvault Command Center flaw allows remote code execution. Patch the vulnerability now to secure your systems against potential threats.
Socket Acquires Coana to Enhance Code Risk Accuracy
Socket acquires Coana to improve code risk accuracy, enhancing software security and reliability for developers and businesses alike.
Malicious npm Packages Imitate Telegram Bot API to Install SSH Backdoors on Linux
Malicious npm packages mimic the Telegram Bot API to install SSH backdoors on Linux, posing serious security risks for developers and systems.
Urgent: Easy Exploit Found in Erlang/OTP SSH Pre-Auth RCE – Immediate Patching Required
Urgent: A critical RCE vulnerability in Erlang/OTP SSH pre-authentication has been discovered. Immediate patching is required to ensure security.