Just days after Microsoft disclosed four serious flaws in Microsoft Exchange email servers, attackers are going on a wide hunt for vulnerable machines, some security experts say. The flaws could be exploited for creating backdoors for email accounts or installing ransomware and cryptominers.
This edition of the ISMG Security Report features an analysis of key takeaways from the breaches tied to flaws in the Accellion File Transfer appliance. Also featured: Equifax CISO Jamil Farshchi on transforming supply chain security, plus an analysis of how "work from anywhere" is affecting cybersecurity.
A team of security researchers has released a new jailbreak for iOS 14.3 and previous versions that enables users to install and tweak unofficial apps outside Apple's security protections.
Microsoft issued emergency software patches on Tuesday for four zero-day vulnerabilities in its Exchange email server. The alarming vulnerabilities could allow a remote attacker into Exchange and possibly enable further lateral movement.
Mit Organisationen, die auf die digitale Transformation setzen und sich verstärkt Cloud-Services zuwenden, sind Daten und Workloads nicht mehr in einfach abgrenzbaren, privaten On-Premise-Rechenzentren zu finden.
In dieser Welt, in der die Cloud immer mehr im Mittelpunkt steht, müssen Organisationen nun ihre...
A pair of U.S. House committees held their first public hearings into the SolarWinds attack, with lawmakers and witnesses offering support for expanding federal cybersecurity laws to address the security failures. This includes a larger role for CISA to conduct threat hunting.
The Python Software Foundation is issuing updates for Python 3.9.2 and 3.8.8 to address critical security vulnerabilities, including a remote code execution vulnerability that can be exploited to shut down systems.
Are you protected from these common AppSec risks?
A single weak point in a line
of code can create an open
door for attackers.
The cost of an average
breach is $3,920,000.
Nearly 80% of apps contain
at least one critical or high
vulnerability.
Attacks targeting the application layer are on the rise.
Standards and legislation provide incomplete security coverage:
61% of applications had at least one Critical and High Issue NOT covered by OWASP Top 10.
This up 12% YOY, from 49% to 61%.
Open source code has blind spots:
Among the top movers in...
Are Your Applications Secure?
Turn on the news today, and you’ll see how hacks and other cyber threats are wreaking havoc on
businesses across the globe. And, while software security is becoming a higher priority, for many
businesses it’s still an afterthought for most - one-quarter of respondents report their...
A newly-discovered phishing campaign posts harvested credentials using the Telegram messaging app's application programming interface to bypass secure email gateways, report researchers at the Cofense Phishing Defense Center.
SonicWall was recently attacked via a zero-day flaw in one of its own products. Curiously, SonicWall hasn't said much about the extent and damage of the breach since its announcement. But there are strong indications it may have been targeted by an extortion attempt.
Autonomous vehicle manufacturers are advised to adopt security-by-design models to mitigate cybersecurity risks, as artificial intelligence is susceptible to evasion and poisoning attacks, says a new ENISA report.
Security firms Crowdstrike, Palo Alto Networks and Sailpoint are making acquisitions to bolster their product portfolios. Here's a rundown of the deals.
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing databreachtoday.eu, you agree to our use of cookies.
