Collaborate Disseminate
On the first day of the Pwn2Own Toronto 2022 hacking competition, participants earned a total of $400,000 for new exploits targeting phones, printers, routers and NAS devices.
read more Continue reading Pwn2Own Toronto 2022, Day 1: Hackers Earn $400,000 for Galaxy S22, SOHO Exploits
Cloud company Rackspace has confirmed being targeted in a ransomware attack after it was forced to shut down its Hosted Exchange environment.
Rackspace’s hosted Microsoft Exchange service started experiencing problems on Friday, December 2. The company… Continue reading Rackspace Confirms Ransomware Attack as It Tries to Determine If Data Was Stolen
Sophos has informed customers that Sophos Firewall version 19.5, whose general availability was announced in mid-November, patches several vulnerabilities, including ones that can lead to arbitrary code execution.
read more Continue reading Several Code Execution Vulnerabilities Patched in Sophos Firewall
Researchers at firmware and hardware security company Eclypsium have identified several potentially serious vulnerabilities in baseboard management controller (BMC) firmware made by AMI (American Megatrends) and used by some of the world’s biggest serv… Continue reading Security Flaws in AMI BMC Can Expose Many Data Centers, Clouds to Attacks
The US Government Accountability Office (GAO) has urged several federal agencies to conduct cybersecurity-related assessments in an effort to improve the protection of certain critical infrastructure sectors.
read more Continue reading US Agencies Told to Assess IoT/OT Security Risks to Boost Critical Infrastructure Protection
Cloud company Rackspace is investigating a cybersecurity incident that forced it to shut down its Hosted Exchange environment.
read more Continue reading Rackspace Shuts Down Hosted Exchange Systems Due to Security Incident
New York City-based passwordless authentication solutions provider Hypr announced on Thursday that it has raised $25 million in a Series C1 funding round.
read more Continue reading Hypr Raises $25 Million for Passwordless Authentication Platform
Qualys’ Threat Research Unit has shown how a new Linux vulnerability could be chained with two other apparently harmless flaws to gain full root privileges on an affected system.
read more Continue reading Three Innocuous Linux Vulnerabilities Chained to Obtain Full Root Privileges
IBM recently patched a vulnerability in IBM Cloud Databases for PostgreSQL that could have exposed users to supply chain attacks.
read more Continue reading IBM Cloud Vulnerability Exposed Users to Supply Chain Attacks