Category All

A combination of factors such as an expanding attack surface, increasing cybersecurity and data regulation, and an ongoing skills shortage are putting unsustainable pressure on the mental health of cyber leaders and professionals. “The environment is particularly tough. I’m really…

June 14, 2023Ravi LakshmananPatch Tuesday / Vulnerability Microsoft has released fixes for the Windows operating system and other software components to fix major security flaws as part of its June 2023 Patch Tuesday updates. Of the 73 flaws, the severity…

At this point, it almost has to be patched, right? CD Projekt Red released Cyberpunk 2077 as a rush construction much earlier than planned, but at the time of release it was more of a bug than a game. Things…

Cybersecurity experts at Orca Security have identified two critical cross-site scripting (XSS) vulnerabilities in Microsoft Azure services. The flaw exploited a weakness in the postMessage iframe that could expose Azure users to a potential security breach. This vulnerability was found…

June 14, 2023hacker newsThreat Intel / Network Security Back in the 90’s and early 80’s, the System Administrator’s Handbook said:Filter incoming traffic.not everyone is a good person“(later coined by Gandalf)”you shall not passAs such, CIOs began tightening network fencing on…

A series of malicious GitHub repositories masquerading as legitimate security research projects have been discovered. VulnCheck researcher Jacob Baines shared the findings in a new advisory published today, claiming the repository contains exploits for well-known products such as Chrome, Exchange…

June 14, 2023Ravi LakshmananZero-day/network security Chinese state aid group known as UNC3886 A zero-day flaw in VMware ESXi hosts was found to be exploited to backdoor Windows and Linux systems. VMware Tools Authentication Bypass Vulnerability Tracked as CVE-2023-20867 (CVSS Score:…

ASUS started global sales of the portable game console “ROG Ally” this week. Asus has embraced Valve’s Steam Deck and other portable products, offering high performance delivered by AMD’s Ryzen Z1 Extreme processor, wide compatibility with games, the latest features…

Earlier this year, I was honored to be invited by Vodafone to appear on an episode of their series “Learning Curve” for founders, business leaders and those who actually want to be business leaders. Even though I heard that the…

A critical security vulnerability has been discovered in the popular WooCommerce Stripe Gateway plugin, which could expose users’ personally identifiable information (PII). This vulnerability affects versions 7.4.0 and below of the Unauthenticated Insecure Direct Object Reference (IDOR) plugin, which boasts…