Popular WAFs Subverted by JSON Bypass
December 12 2022Web application firewalls from AWS, Cloudflare, F5, Imperva, and Palo Alto Networks are vulnerable to a database attack using the popular JavaScript Object Notation (JSON) format.
Read morePalo Alto Networks Xpanse Active Attack Surface Management Automatically Remediates Cyber Risks Before They Lead to Cyberattacks
December 12 2022New Cortex Xpanse features give organizations visibility and control of their attack surfaces to discover, evaluate, and address cyber risks.
Read moreWhen Companies Compensate the Hackers, We All Foot the Bill
December 12 2022Ensuring stronger in-house defenses is integral to retaining customer loyalty.
Read moreApple Is Finally Encrypting iCloud Backups
December 12 2022After way too many years, Apple is finally encrypting iCloud backups:
Based on a screenshot from Apple, these categories are covered when you flip on Advanced Data Protection: device...
Read more
Nearly 4,500 Pulse Connect Secure VPNs Left Unpatched and Vulnerable
December 12 2022Pulse Connect VPN server software received several updates over the years, and thousands of hosts haven't patched.
Read moreTrilio Raises $17M, Appoints Massood Zarrabian as CEO
December 12 2022Funding and new leadership to drive innovation and growth in cloud-native application resiliency; round led by SKK Ventures with T-Mobile and Telefonica.
Read moreFriday Squid Blogging: China Bans Taiwanese Squid Imports
December 10 2022Today I have some squid geopolitical news. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...
Read moreTikTok Banned on Govt. Devices; Will Private Sector Follow Suit?
December 10 2022Texas and Maryland this week joined three other states in prohibiting accessing the popular social media app from state-owned devices.
Read moreHacking Trespass Law
December 10 2022This article talks about public land in the US that is completely surrounded by private land, which in some cases makes it inaccessible to the public. But there’s...
Read moreIran-Backed MuddyWater’s Latest Campaign Abuses Syncro Admin Tool
December 10 2022MuddyWater joins threat groups BatLoader and Luna Moth, which have also been using Syncro to take over devices.
Read more
Recent Comments