Network Security
Zyxel patches at least 15 security flaws that expose users to authentication bypass, command injection and denial-of-service attacks.
Hi, what are you looking for?
SecurityWeek
Network Security
Government agencies issue guidance on Chinese telecoms hacking as US officials say threat actors may have yet to be expelled.
Incident Response
Microsoft debuts Quick Machine Recovery tool to apply fixes even when machines are unable to boot, without needing physical access.
Network Security
A coordinated IP spoofing attack that involved port scans tried to disrupt the Tor network by getting relays on blocklists.
Nation-State
The US government's CFPB sent an email with a simple directive: “Do NOT conduct CFPB work using mobile voice calls or text messages.”
Network Security
HPE this week warned of two critical vulnerabilities in Aruba Networking access points that could lead to unauthenticated command injection.
Nation-State
A stealthy network backdoor found on hacked Sophos XG firewall devices is programmed to work on a broader range of Linux-based devices.
Cloud Security
VMware flaw carries a CVSS severity-score of 9.8/10 and can be exploited to bypass login restrictions when authenticating on certain ports.
Endpoint Security
Veeam Software has rolled out patches to cover code execution vulnerabilities in its Veeam ONE IT monitoring product.
Network Security
There has been an ongoing debate in the security industry over the last decade or so about whether or not deep packet inspection (DPI)...
Identity & Access
One of the main reasons why ZTNA fails is that most ZTNA implementations tend to focus entirely on securing remote access.
Identity & Access
SolarWinds patches high-severity flaws in its Access Rights Manager product, including three unauthenticated remote code execution issues.
Network Security
Organizations respond to HTTP/2 Rapid Reset zero-day vulnerability exploited to launch the largest DDoS attacks seen to date.
Network Security
A zero-day vulnerability named HTTP/2 Rapid Reset has been exploited to launch some of the largest DDoS attacks in history.
Network Security
CISA and the NSA are urging network defenders and software developers to address the top ten cybersecurity misconfigurations.
Funding/M&A
Silicon Valley startup lands $4 million in seed funding from SYN Ventures, Okta Ventures and Secure Octane.
Cloud Security
The widely believed notion that the network and the cloud are two different and distinct entities is not true.
Network Security
Silverfort has released the source code for its lateral movement detection tool LATMA, to help identify and analyze intrusions.
Nation-State
A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign.
Malware & Threats
Supply Chain Security
Hacker Conversations
Cybersecurity Funding
Malware & Threats
Tracking & Law Enforcement