Endor Labs has introduced an OWASP-style listing of the most important or impactful risks inherent in the use of open source software (OSS). The post Top 10 Security, Operational Risks From Open Source Code appeared first on...
WebKit flaw ‘may have been exploited’ just like Tim Cook ‘may have’ made a million bucks this week Apple this week released bug-splatting updates to its operating systems and Safari browser, to fix a...
Welcome to Cyber Security Today. This is the Week in Review edition for Friday October 29th. I’m...
A vulnerability in the GitHub Actions workflow for PyPI’s source repository could be exploited to perform a malicious pull request and eventually execute arbitrary code on pypi.org, according to a warning from a Japanese...
Threat actors enlist compromised WordPress websites in campaign targeting macOS users.
Ransomware threat actors are increasingly getting into organizations by working with criminals who have already penetrated their network, and not through email, according to new research. In a blog published today, Proofpoint...
The Apache Software Foundation on Friday addressed a high severity vulnerability in Apache OFBiz that could have allowed an unauthenticated adversary to remotely seize control of the open-source enterprise resource planning...
SAP has released seven new security notes on February 2021 Security Patch Day, including a Hot News note that addresses a critical flaw in SAP Commerce. It also updated six previously released notes. read more
Today’s podcast reports on the hack of a software firm’s forum administrator account, COVID vaccine documents altered in a hack intimate photos from a discontinued app found unprotected and a warning about dating...
Chinese quartet conspired to plant a malicious SDK inside an app that came preinstalled on Gionee devices.
The Feds have published a Top 25 exploits list, rife with big names like BlueKeep, Zerologon and other notorious security vulnerabilities.
VMware this week informed customers that it has patched several vulnerabilities in its ESXi, Workstation, Fusion and NSX-T products, including a critical flaw that allows arbitrary code execution. The critical vulnerability,...
