The quantum threat to RSA-based encryption is deemed to be so pressing that NIST is seeking a quantum safe alternative
Is OTP a Viable Alternative to NIST’s Post-Quantum Algorithms?
Critical Packagist Vulnerability Opened Door for PHP Supply Chain Attack
Code security company SonarSource today published details on a severe vulnerability impacting Packagist, which could have been abused to mount supply chain attacks targeting the PHP community.
DHS Tells Federal Agencies to Improve Asset Visibility, Vulnerability Detection
The Cybersecurity and Infrastructure Security Agency (CISA) this week published Binding Operational Directive 23-01 (BOD 23-01), which requires federal agencies to take the necessary steps to improve their asset visibility and vulnerability detection capabilities within the next six months.
Firmware Security Company Eclypsium Raises $25 Million in Series B Funding
Firmware and hardware security company Eclypsium announced on Tuesday that it has raised $25 million in a Series B funding round, which brings the total invested in the firm to $50 million.
Webinar Today: The Ultimate Insider’s Guide to DDoS Mitigation Strategies
Web Security Company Detectify Raises $10 Million
Sweden-based domain and web application security firm Detectify has received a $10 million investment from Insight Partners, bringing the total raised by the company to $42 million.
Critical Vulnerabilities Expose Parking Management System to Hacker Attacks
Nearly a dozen vulnerabilities have been found in a car parking management system made by Italian company Carlo Gavazzi, which makes electronic control components for building and industrial automation.
Mitigation for ProxyNotShell Exchange Vulnerabilities Easily Bypassed
A mitigation proposed by Microsoft and others for the new Exchange Server zero-day vulnerabilities named ProxyNotShell can be easily bypassed, researchers warn.
The security holes, officially tracked as CVE-2022-41040 and CVE-2022-41082, can allow an attacker to remotely execute arbitrary code with elevated privileges.
Cybersecurity M&A Roundup: 39 Deals Announced in September 2022
Report: Mexico Continued to Use Spyware Against Activists
The Mexican government or army has allegedly continued to use spyware designed to hack into the cellphones of activists, despite a pledge by President Andrés Manuel López Obrador to end such practices.
