Dissecting a complex vulnerability and achieving arbitrary code execution in Ichitaro WordCisco Talos·Mar 20, 12:00 UTC · Mar 20, 2024VulnerabilityCVE-2023-35126CVE-2023-34366CVE-2023-38127+1 CVEs47
Product showcase: Permit.io - Application-level permissions with a no-code UIHelp Net Security·Mar 12, 12:27 UTC · Mar 12, 2024AI tools & infra30
HID Global and Fidesmo join forces to add contactless access control to wearablesHelp Net Security·Jan 23, 13:37 UTC · Jan 23, 2024Industry30
This Free Discovery Tool Finds and Mitigates AIThe Hacker News·Jan 18, 07:40 UTC · Jan 18, 2024Model release50
Cybellum's Product Security Platform achieves MITRE's CWE-compatible designationHelp Net Security·Nov 27, 06:05 UTC · Nov 27, 2023Vulnerability55
Thousands of Android devices come with unkillable backdoor preinstalledArs Technica · Security·Oct 7, 10:32 UTC · Oct 7, 2023Malware42
CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022Security Affairs·Aug 4, 06:31 UTC · Aug 4, 2023VulnerabilityCVE-2018-13379CVE-2021-34473CVE-2021-31207+8 CVEs60
Deputy National Security Advisor Anne Neuberger on addressing the security threats of AICyberScoop·Aug 2, 13:57 UTC · Aug 2, 2023Malware30
Regula enhances solution for document verification to help users detect forgeryHelp Net Security·Jun 26, 00:00 UTC · Jun 26, 2023Phishing & fraud30
IRONSCALES boosts email security with generative AI capabilitiesHelp Net Security·Jun 20, 00:00 UTC · Jun 20, 2023Data breach60
Investigating ChatGPT phishing detection capabilitiesKaspersky Securelist·May 1, 10:00 UTC · May 1, 2023Phishing & fraud30
What's the Difference Between CSPM & SSPM?The Hacker News·Apr 17, 13:32 UTC · Apr 17, 2023Vulnerability55
Foiling RaaS attacks via active threat huntingHelp Net Security·Jan 16, 10:28 UTC · Jan 16, 2023Ransomware60
Fortinet fixed command injection bugs in FortiADC and FortiTesterSecurity Affairs·Jan 4, 15:17 UTC · Jan 4, 2023Vulnerability in the wildCVE-2022-39947CVE-2022-3584560
Meet fundamental cybersecurity needs before aiming for moreHelp Net Security·Dec 8, 11:27 UTC · Dec 8, 2022Policy & legal30
Tips for Gamifying Your Cybersecurity Awareness Training ProgramSecurity Affairs·Nov 29, 10:05 UTC · Nov 29, 2022Data breach57
Bellingcat Founder Eliot Higgins on Finding Truth in a World of DisinformationThe Record·Nov 17, 21:11 UTC · Nov 17, 2022Malware30
How the Software Supply Chain Security is Threatened by HackersThe Hacker News·Oct 27, 16:12 UTC · Oct 27, 2022Ransomware57
Purpose-based access control: Putting data access requests into contextHelp Net Security·Oct 10, 00:00 UTC · Oct 10, 2022Policy & legal55
7 Cybersecurity Audiobooks You Should Listen To This YearHelp Net Security·Oct 5, 00:00 UTC · Oct 5, 2022Ransomware60
Identity is the killer context: 4 ways to stay in controlHelp Net Security·Aug 10, 00:00 UTC · Aug 10, 2022Data breach57
State Department needs more cyber policy muscle, says cyberspace ambassador nomineeCyberScoop·Aug 4, 16:39 UTC · Aug 4, 2022Exploit / PoC in the wild60
Mitre shared 2022 CWE Top 25 most dangerous software weaknessesSecurity Affairs·Jun 29, 10:40 UTC · Jun 29, 2022Exploit / PoC in the wild60
How financial institutions are improving customer experience with fraud prevention measuresHelp Net Security·Jun 17, 00:00 UTC · Jun 17, 2022Phishing & fraud42
Experts show how to run malware on chips of a turnedSecurity Affairs·May 23, 19:03 UTC · May 23, 2022Malware30
New Unpatched Bug Could Let Attackers Steal Money from PayPal UsersThe Hacker News·May 23, 11:02 UTC · May 23, 2022Vulnerability30
Nothing personal: Training employees to identify a spear phishing attackHelp Net Security·May 9, 07:15 UTC · May 9, 2022Phishing & fraud55
Linux Improves Its Random Number GeneratorSchneier on Security·Apr 12, 19:25 UTC · Apr 12, 2022Malware42
New Browser Attack Allows Tracking Users Online With JavaScript DisabledThe Hacker News·Feb 23, 04:35 UTC · Feb 23, 2022Research30
ADVA Ensemble Simulator enables end-to-end configuration testingHelp Net Security·Feb 11, 00:00 UTC · Feb 11, 2022AI tools & infra30
Exploit in the Wild: #drupalgeddon2 - Analysis of CVE-2018Palo Alto Unit 42·Jan 28, 21:25 UTC · Jan 28, 2022Exploit / PoC in the wildCVE-2018-760060
Your supply chain: How and why network security and infrastructure matterHelp Net Security·Nov 26, 00:00 UTC · Nov 26, 2021Malware55
Crooks use math symbols to evade antiSecurity Affairs·Oct 13, 09:38 UTC · Oct 13, 2021Exploit / PoC60
The role of automation in staying on top of the evolving threat landscapeHelp Net Security·Sep 9, 00:00 UTC · Sep 9, 2021Ransomware60
Getting ahead of a major blind spot for CISOs: Third-party riskHelp Net Security·Sep 1, 00:00 UTC · Sep 1, 2021Ransomware57
Privacera partners with StreamSets to strengthen data security for ETL processing in the cloudHelp Net Security·Aug 25, 00:00 UTC · Aug 25, 2021Policy & legal30
User data privacy decisions can be easily manipulatedHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2021Policy & legal30
IQ-Analog selects Diakopto's ParagonX to improve performance of their ICsHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2021AI tools & infra30
New 5G Network Flaws Let Attackers Track Users' Locations and Steal DataThe Hacker News·Mar 26, 07:53 UTC · Mar 26, 2021Vulnerability55
Federal election agency adopts updated voting security standards. Not everyone is happy.CyberScoop·Feb 10, 22:50 UTC · Feb 10, 2021Exploit / PoC in the wild60