Researchers at Monash University and the Oceania Cyber Security Centre (OCSC) are working with Pacific governments to assess their current cybersecurity situations and make recommendations for the path ahead. Leaders from several Pacific nations recently…

A new and simple scanning tool has revealed some flaws in widely used web cybersecurity programs. The tool also demonstrates how these flaws can be addressed. Websites and web applications have recently become a popular target for cybercriminals…

Security researchers at Sonar have discovered a new flaw in RARlab’s UnRAR utility that could be exploited to steal emails from individual Zimbra mail user accounts.  The path traversal vulnerability, found in the Unix versions of UnRAR, has been…

Microsoft has recently patched a vulnerability that could allow an attacker with access to an Azure Linux container to escalate privileges and take over the entire cluster.  The vulnerability is tracked as CVE-2022-30137 and impacts Service Fabric,…

The US Department of Commerce has announced a new initiative to collaborate with universities to protect potentially sensitive research products from theft by foreign agents. The Commerce Department's assistant secretary for export enforcement, Matthew S…

A leading UK producer of frozen ready meals has revealed its systems are currently down after experiencing a serious cyberattack.  Wiltshire Farm Foods said on Sunday that it is “currently experiencing severe difficulties” with its computer systems…

Personal information of all concealed carry permit holders in California was exposed after the state Department of Justice suffered a data breach.  On Tuesday, the Fresno County Sheriff's Office learned of the breach from the California State…

The White House mandated post-quantum cybersecurity (PQC) earlier this year via the National Security Memorandum "Promoting US Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems." In addition, the Quantum Computing…

SoS Musings #62 - Increasing the Power of Cybersecurity Deception

Cybersecurity Snapshots #31 - Healthcare Organizations Are Being Inundated With Cyberattacks

The Homeland Security Systems Engineering and Development Institute, sponsored by the US Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) and operated by MITRE, has released a list of the top 25 most dangerous…

Researchers at Intezer have discovered a new data-stealing malware dubbed YTStealer that targets YouTube content creators by stealing their authentication cookies. The malicious tool is likely sold as a service on the dark web, and it is distributed via…