Bug Bounty FAQ: Top Questions, Expert Answers
Four leading voices in the bug bounty community answer frequently asked questions from bounty hunters,…
Month: September 2020
What one company’s deal with the feds tells us about the long tail of data breaches
It’s no secret that recovering from a data breach can get very expensive, very fast….
FortiGate VPN Default Config Allows MitM Attacks
The client’s default configuration for SSL-VPN has a certificate issue, researchers said. Default configurations of…
Industrial Cyberattacks Get Rarer but More Complex
The first half of 2020 saw decreases in attacks on most ICS sectors, but oil/gas…
Transparent Tribe: Evolution analysis, part 1
Background and key findings Transparent Tribe, also known as PROJECTM and MYTHIC LEOPARD, is a…
Supply chain weak security link for 92 percent of US companies
The devastating Target breach – the result of an earlier attack on the retail giant’s…
Cisco Patch-Palooza Tackles 29 High-Severity Bugs
Patches and workaround fixes address flaws on networking hardware running Cisco IOS XE software. Cisco…
Feds Hit with Successful Cyberattack, Data Stolen
The attack featured a unique, multistage malware and a likely PulseSecure VPN exploit. A federal…
Alien Android Banking Trojan Sidesteps 2FA
A new ‘fork’ of the Cerberus banking trojan, called Alien, targets victims’ credentials from more…
Shopify breach: Help center employees are a unique breed of insider threat
Shopify’s Toronto office. (Raysonho @ Open Grid Scheduler / Grid Engine) A data breach at…