The Open Web Application Security Project (OWASP) was founded in 2001. This non-profit organization seeks to educate and inform developers on secure development practices, and provides developers with tools to create web applications securely.
read more
93 Million Mexican Voter Records Leaked Online
Authorities in Mexico have launched an investigation after a researcher discovered a publicly accessible database containing the personal details of tens of millions of Mexican registered voters.
read more
Windows AppLocker Bypassed to Execute Remote Scripts
Microsoft’s Windows AppLocker, a feature introduced in Windows 7 to specify which users can run apps within an organization, can be bypassed to execute remote scripts on a machine, a researcher says.
read more
Why You Need Visibility of Your Supply Chain Cyber Risks
When it comes to cybersecurity, the common tact is to build out your network defenses and then extend to endpoints. But as business becomes more connected and as data moves further outside the organizational walls, enterprises must look at weaknesses across each area that depends on technology – and a good place to focus is on the supply chain.
read more
Attacker Friendly Hosting Firm Leveraged by Pawn Storm Hackers
A Small VPS Provider Registered in the United Arab Emirates Has Been Providing Services to Pawn Storm Attackers and Other Cybercriminal Operations
read more
Attackers Deliver “Laziok” Trojan via Google Docs
Malicious actors have abused PowerShell and Google Docs to deliver a Trojan known as Laziok, FireEye reported on Thursday.
read more
Attackers Use PowerShell, Google Docs to Deliver “Laziok” Trojan
Malicious actors have abused PowerShell and Google Docs to deliver a Trojan known as Laziok, FireEye reported on Thursday.
read more
Ransomware: A Formidable Enterprise Threat
read more
Continue readingAdobe Patches Flaw in Analytics AppMeasurement for Flash Library
Adobe released an update on Thursday for the Analytics AppMeasurement for Flash library to address a DOM-based cross-site scripting (XSS) vulnerability rated “important.”
The AppMeasurement for Flash library allows users to collect video viewing activity and forward the data to Adobe’s data collection servers, where it can be used via Marketing Cloud services.
read more
Researcher Finds Malicious Web Shell on Facebook Server
A researcher received $10,000 from Facebook after uncovering a serious vulnerability and a malicious web shell left behind by hackers on one of the social media giant’s servers.
read more
