Collaborate Disseminate
Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Continue reading Twitter Whistleblower Complaint: The TL;DR Version
CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Continue reading Firewall Bug Under Active Attack Triggers CISA Warning
‘Summer Camp’ for hackers features a compromised satellite, a homecoming for hackers and cyberwarfare warnings. Continue reading Black Hat and DEF CON Roundup
Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites. Continue reading Facebook’s In-app Browser on iOS Tracks ‘Anything You Do on Any Website’
Networking giant says attackers gained initial access to an employee’s VPN client via a compromised Google account. Continue reading Cisco Confirms Network Breach Via Hacked Employee Google Account
August Patch Tuesday tackles 121 CVEs, 17 critical bugs and one zero-day bug exploited in the wild. Continue reading Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws
Feds urge U.S. agencies to patch a Microsoft July Patch Tuesday 2022 bug that is being exploited in the wild by August 2. Continue reading CISA Urges Patch of Exploited Windows 11 Bug by Aug. 2
Melissa Bischoping, security researcher with Tanium and Infosec Insiders columnist, urges firms to consider the upstream and downstream impact of “triple extortion” ransomware attacks. Continue reading Cybercriminals Expand Attack Radius and Ransomware Pain Points
Mohit Tiwari, CEO of Symmetry Systems, explores Zero Trust, data objects and the NIST framework for cloud and on-prem environments. Continue reading Zero Trust for Data Helps Enterprises Detect, Respond and Recover from Breaches
Daniel Kaar, global director application security engineering at Dynatrace, highlights the newfound respect for AppSec-enabled observability in the wake of Log4Shell. Continue reading Closing the Gap Between Application Security and Observability