Thousands of Publicly Exposed API Tokens Could Threaten Software Integrity
JFrog scanned over eight million artifacts in the most common open-source software registries
Cyber News, Cyber Threat TrendsCyber-Enabled Crimes Are Biggest Police Concerns
Interpol study warns that many threats are expected to increase
Cyber News, Cyber Threat TrendsOldGremlin Ransomware Ups Ante Against Russian Targets
Ransom demands soar to $17m, according to new report
Cyber News, Cyber Threat TrendsLesson Learned: How SolarWinds Strengthened its Security Post-Incident
Tim Brown, CISO and VP of security at SolarWinds shared his experiences remediating a major cyber-attack during Mandiant’s mWISE event on October 18, 2022
Cyber News, Cyber Threat Trends
- October 21, 2022
A Quick Look at the “Strengthening America’s Cybersecurity” Initiative
Acknowledging that you have a problem is the first step to addressing the problem in a serious way. This seems to be the reasoning for the White House recently announcing its “Strengthening America’s Cybersecurity” initiative. The text of the announcement contains several statements that anyone who’s ever read about cybersecurity will have heard many times […]
Cyber News, Cyber Threat Trends
- October 21, 2022
Microsoft Confirms Server Misconfiguration Led to 65,000+ Companies’ Data Leak
Microsoft this week confirmed that it inadvertently exposed information related to thousands of customers following a security lapse that left an endpoint publicly accessible over the internet sans any authentication. “This misconfiguration resulted in the potential for unauthenticated access to some business transaction data corresponding to interactions between Microsoft and prospective
Cyber News, Cyber Threat TrendsDo the recent DDoS attacks signal future web application risks?
Multiple reports in the media, including in Bloomberg US Edition, allege that Russian-associated cybercrime group Killnet is responsible for a series of distributed-denial-of-service (DDoS) attacks during the week of October 6 that took several state government and other websites offline. While most of the websites were restored within 48 hours, these volumetric attacks can leave […]
Cyber News, Cyber Threat TrendsAdversarial ML Attack that Secretly Gives a Language Model a Point of View
Machine learning security is extraordinarily difficult because the attacks are so varied—and it seems that each new one is weirder than the next. Here’s the latest: a training-time attack that forces the model to exhibit a point of view: Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures.” Abstract: We investigate a new threat to neural […]
Cyber News, Cyber Threat Trends
- October 21, 2022
Hackers Started Exploiting Critical “Text4Shell” Apache Commons Text Vulnerability
WordPress security company Wordfence on Thursday said it started detecting exploitation attempts targeting the newly disclosed flaw in Apache Commons Text on October 18, 2022. The vulnerability, tracked as CVE-2022-42889 aka Text4Shell, has been assigned a severity ranking of 9.8 out of a possible 10.0 on the CVSS scale and affects versions 1.5 through 1.9 of the […]
Cyber News, Cyber Threat Trends