News

Patch Notes #6: Pokémon TCG Pocket is my favorite gateway drug
Patch Notes #6: Pokémon TCG Pocket is my favorite gateway drug
A pocket full of positivity.
Nov. 15, 2024
Bank of England U-turns on Vulnerability Disclosure Rules
Bank of England U-turns on Vulnerability Disclosure Rules
The UK’s financial regulators have discarded plans to force critical suppliers to disclose new vulnerabilities
Nov. 14, 2024
API Security in Peril as 83% of Firms Suffer Incidents
API Security in Peril as 83% of Firms Suffer Incidents
Over 80% of UK organizations suffered an API security incident in the past year, with each costing over £400,000
Nov. 14, 2024
Massive Telecom Hack Exposes US Officials to Chinese Espionage
Massive Telecom Hack Exposes US Officials to Chinese Espionage
The FBI and CISA have confirmed that US officials’ private communications have been compromised
Nov. 14, 2024
Microsoft Power Pages Misconfiguration Leads to Data Exposure
Microsoft Power Pages Misconfiguration Leads to Data Exposure
Misconfigurations in Microsoft Power Pages granting excessive access permissions expose sensitive data, risking PII to unauthorized users
Nov. 14, 2024
Sitting Ducks DNS Attacks Put Global Domains at Risk
Sitting Ducks DNS Attacks Put Global Domains at Risk
Over 1 million domains are vulnerable to “Sitting Ducks” attack, which exploits DNS misconfigurations
Nov. 14, 2024
Reflections on my score for Tactical Breach Wizards
Reflections on my score for Tactical Breach Wizards
Here's an inside look at the creative process, inspirations, experiences, and challenges behind the score for Tactical Breach Wizards.
Nov. 14, 2024
Microsoft Fixes Four More Zero-Days in November Patch Tuesday
Microsoft Fixes Four More Zero-Days in November Patch Tuesday
Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited
Nov. 13, 2024
Amazon MOVEit Leaker Claims to Be Ethical Hacker
Amazon MOVEit Leaker Claims to Be Ethical Hacker
An individual who posted data allegedly stolen via MOVEit from Amazon and other big-name firms claims not to be malicious
Nov. 13, 2024
Lazarus Group Uses Extended Attributes for Code Smuggling in macOS
Lazarus Group Uses Extended Attributes for Code Smuggling in macOS
Lazarus APT has been found smuggling malware onto macOS devices using custom extended attributes, evading detection
Nov. 13, 2024
AI Threat to Escalate in 2025, Google Cloud Warns
AI Threat to Escalate in 2025, Google Cloud Warns
2025 could see our biggest AI fears materialize, according to a Google Cloud forecast report
Nov. 13, 2024
Hive0145 Targets Europe with Advanced Strela Stealer Campaigns
Hive0145 Targets Europe with Advanced Strela Stealer Campaigns
Hive0145 is targeting Spain, Germany, Ukraine with Strela Stealer malware in invoice phishing tactic
Nov. 13, 2024