Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out
60
Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw
60
Week in review: Google fixes yet another Chrome zero-day exploit, YouTube as a cybercrime channel
60
30
Week in review: Microsoft fixes two actively exploited 0-days, PAN-OS auth bypass hole plugged
60
60
35
60
60
60
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerability
60
60
60
Week in review: PostgreSQL databases under attack, new Chrome zero-day actively exploited
60
60
Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached
60
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR
60
60
55
60
Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited
60
60
60
60
60
60
Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited
60
60
60
Permify: Open-source authorization as a service
Help Net Security profiles Permify, an open-source Zanzibar-style authorization service supporting RBAC, ABAC, and relationship-based rules with multi-tenant deployments.
Permify is an open-source authorization-as-a-service project modeled on Google Zanzibar that centralizes access-control decisions outside application code. It supports role-based, relationship-based, and attribute-based access rules, answers checks in tens of milliseconds via REST and gRPC, and runs from a single Docker command. It is a CNCF member and is freely available on GitHub.
15
55
47
60
60
60
42
30
55
30
57