VF Corp December data breach impacts 35 million customers
American global apparel and footwear company VF Corp revealed that the December data breach impacted 35.5 million customers. VF Corporation is an American global apparel […]
Security
Security
Friday Squid Blogging: New Foods from Squid Fins
We only eat about half of a squid, ignoring the fins. A group of researchers is working to change that.
News & Updates
Snyk Acquires Helios for Runtime Visibility
Developer-security company Snyk will integrate startup Helios’ app-discovery service and runtime data collection tools into its AppRisk service.
News & Updates
Ivanti Zero-Day Exploits Skyrocket Worldwide; No Patches Yet
Anyone who hasn’t mitigated two zero-day security bugs in Ivanti VPNs may already be compromised by a Chinese nation-state actor.
News & Updates
Bosch Smart Thermostat Feels the Heat From Firmware Bug
The vulnerability in a popular hospitality industry gadget allows attackers to take over the device, pivot into the user’s network, or brick the device entirely, rendering HVAC unusable.
News & Updates
Patch ASAP: Max-Critical Atlassian Bug Allows Unauthenticated RCE
Rated at a CVSS score of 10, the bug is as bad as it gets, allowing remote cyberattackers unfettered access to corporate environments.
News & Updates
Africa, Middle East Lead Peers in Cybersecurity, but Lag Globally
Both regions score above average compared to similar sized economies, but investing in updated technologies and patching processes would help cyber resilience globally.
News & Updates
178K+ SonicWall Firewalls Vulnerable to DoS, RCE Attacks
Two flaws discovered a year apart are ostensibly the same with slightly different exploit paths, exposing corporate networks to risk and potential intrusion.
News & Updates
UAE Cyber Security Council, Khalifa University Launch Abu Dhabi Academy
The university will also join the Emirates’ National Cybersecurity Center of Excellence.
News & Updates
Anti-Ransomware Coalition Bound to Fail Without Key Adjustments
International pledge to reject ransomware demands misses the most important way to combat cybercrime: prevention.