FTC accuses genetic testing company of exposing sensitive health data
The Federal Trade Commission on Friday accused the genetic health testing firm 1health.io of failing to protect sensitive genetic and health data, the latest in Read More
June 2023
Third MOVEit Transfer Vulnerability Disclosed by Progress Software
Yet another MOVEit Transfer vulnerability, CVE-2023-35708, was discovered this week by Progress Software, the third that the company has disclosed, alongside CVE-2023-34362 and CVE-2023-35036. The issue Read More
Security LeadHER Wraps Groundbreaking Inaugural Conference for Women in Security
ALEXANDRIA, Va. & SILVER SPRING, Md. – ASIS International and the Security Industry Association (SIA) closed out the inaugural Security LeadHER conference this week, celebrating a successful and groundbreaking first event Read More
Pro-Russian hackers remain active amid Ukraine counteroffensive
Pro-Russian hackers are continuing to hit targets in Ukraine amid a counteroffensive aimed at reclaiming territory held by Russian forces in what Ukrainian officials and Read More
Dodgy Microlending Apps Stalk MEA Users, Highlighting Cyber Maturity Gaps
Research emerged this week showing that mobile users in the Middle East and Africa are the third most-likely to install suspicious financial mobile apps — mainly Read More
Keytos Uncovers 15,000 Vulnerable Subdomains per Month in Azure Using Cryptographic Certificates
BOSTON, June 15, 2023 /PRNewswire/ — The vulnerability of subdomain takeover in Microsoft Azure continues to pose a threat, with researchers at Keytos discovering approximately 15,000 vulnerable subdomains Read More
Attackers Create Synthetic Security Researchers to Steal IP
During the month of May, an unknown threat group created a malicious GitHub repository that claimed to contain a zero-day exploit for a vulnerability in Read More
Russian national arrested in Arizona, charged for alleged role in LockBit ransomware attacks
Federal law enforcement officials arrested a Russian national in Arizona on charges related to his participation in multiple LockBit ransomware attacks against victims in the Read More
The Infrastructure Security Engineer Is a Unicorn Among Thoroughbreds
A team at a recent cloud-native industry event laughed out loud when they told us, “We just got out of a talk, and apparently we Read More
Researchers unpack massive email scam targeting dozens of companies
When researchers at the cybersecurity firm Sygnia responded earlier this year to a compromised email account at an unnamed company, they stumbled upon a sprawling Read More