Bug Bounty FAQ: Top Questions, Expert Answers
Four leading voices in the bug bounty community answer frequently asked questions from bounty hunters,…
24hsec
What one company’s deal with the feds tells us about the long tail of data breaches
It’s no secret that recovering from a data breach can get very expensive, very fast….
FortiGate VPN Default Config Allows MitM Attacks
The client’s default configuration for SSL-VPN has a certificate issue, researchers said. Default configurations of…
Industrial Cyberattacks Get Rarer but More Complex
The first half of 2020 saw decreases in attacks on most ICS sectors, but oil/gas…
Transparent Tribe: Evolution analysis, part 1
Background and key findings Transparent Tribe, also known as PROJECTM and MYTHIC LEOPARD, is a…
Supply chain weak security link for 92 percent of US companies
The devastating Target breach – the result of an earlier attack on the retail giant’s…
Cisco Patch-Palooza Tackles 29 High-Severity Bugs
Patches and workaround fixes address flaws on networking hardware running Cisco IOS XE software. Cisco…
Feds Hit with Successful Cyberattack, Data Stolen
The attack featured a unique, multistage malware and a likely PulseSecure VPN exploit. A federal…
Alien Android Banking Trojan Sidesteps 2FA
A new ‘fork’ of the Cerberus banking trojan, called Alien, targets victims’ credentials from more…
Shopify breach: Help center employees are a unique breed of insider threat
Shopify’s Toronto office. (Raysonho @ Open Grid Scheduler / Grid Engine) A data breach at…