News
-
"Google Offers Free Access to Fuzzing Framework"Fuzzing can be an effective tool for identifying zero-day vulnerabilities in software.
-
"Pennsylvania Courts’ Website Disrupted by DoS Attack"The Pennsylvania Courts system has recently been hit by a cyberattack, taking down parts of its website. The Administrative Office of Pennsylvania Courts revealed via social media that the service had suffered a denial of service (DoS) attack.
-
"Newest Ivanti SSRF Zero-Day Now Under Mass Exploitation"Multiple attackers are currently exploiting a Server-Side Request Forgery (SSRF) vulnerability in Ivanti Connect Secure and Ivanti Policy Secure, tracked as CVE-2024-21893.
-
"CSE Faculty Are Among Google's First Trust & Safety Research Award Winners"Three faculty members from UC San Diego's Department of Computer Science and Engineering (CSE) are some of the first academic researchers worldwide to receive Google's Trust and Safety Research Award.
-
"Mastodon Vulnerability Allows Attackers to Take Over Accounts"Mastodon, the free and open-source decentralized social networking platform, has recently fixed a critical vulnerability that allows attackers to impersonate and take over any remote account.
-
"31 People Arrested in Global Cybercrime Crackdown"Law enforcement in 50 countries recently arrested 31 individuals in a global operation targeting ransomware, banking malware, and phishing.
-
"Clorox and Johnson Controls Reveal $76m Cyberattack Bill"Two new regulatory filings have revealed the surging costs associated with ransomware and other cyber-related incidents.
-
"Researchers Discover Exposed API Secrets, Impacting Major Tech Tokens"Escape's security research team conducted a scan of 189.5 million URLs and discovered the exposure of over 18,000 Application Programming Interface (API) secrets.
-
"AnyDesk Incident: Customer Credentials Leaked and Published for Sale on the Dark Web"Resecurity identified malicious actors selling a large number of AnyDesk customer credentials on the dark web. This credential leak is suspected to be the result of infostealer infections.
-
"How to Run a Password Update Campaign Efficiently and With Minimal IT Costs"There has been little research on how to run a password update campaign efficiently and with minimal Information Technology (IT) costs.
-
"Deepfakes Will Hurt 30% of Organizations' Trust in Biometrics by 2026"Gartner analysts predict that deepfakes, which are Artificial Intelligence (AI)-generated replicas of a person's likeness, will lower confidence in face biometric authentication solutions for 30 percent of companies by 2026.
-
"UTEP, PNNL Partner to Train Cybersecurity Hydropower Experts"Hydropower, one of the oldest forms of energy generation in the US, makes up 6 percent of the country's electricity supply.