Aggregator

Series B Funding Round to Drive European Expansion, R&D and Automated Remediation
Mitiga, a cloud security firm, has secured $30M in Series B funding to expand its solutions for detecting and responding to threats in public cloud and SaaS environments. Funds will support European market entry and R&D into automated remediation tools, boosting security operations globally.

President Fulfills Campaign Promise to Pardon 'Dread Pirate Roberts,' Blames DOJ Abuse
On his second day in office, U.S. President Donald Trump pardoned Ross Ulbricht, founder of Silk Road, an online marketplace tied to over $200 million in illegal bitcoin transactions. Ulbricht has been in federal prison since 2015, sentenced to life with no possibility of parole.

NCC Group observed 574 global ransomware attacks in December, the highest monthly volume it has recorded

In today’s app dev world, where new apps and millions of lines of code are being deployed every day, the need for fast and secure development practices has never been greater. Static Application Security Testing (SAST) plays a big role in meeting this need by finding vulnerabilities directly in the application’s source code often before […]

The post The Growing Role of AI-Powered SAST in the Developer Toolkit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability classified as critical has been found in Frank Lichtenheld FSphp 0.2.1. This affects an unknown part of the file FSphp.php. The manipulation of the argument FSPHP_LIB leads to code injection. This vulnerability is uniquely identified as CVE-2009-3307. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Online Marriage Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file user/search.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql injection. This vulnerability was named CVE-2020-35151. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in Linux Kernel up to 2.6.17.10. Affected by this vulnerability is an unknown functionality of the component squashfs. The manipulation leads to denial of service. This vulnerability is known as CVE-2006-5701. The attack needs to be initiated within the local network. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Легендарный вредонос создаёт новые ловушки для заражённых систем.

Despite last week’s confirmation of and warnings about long-standing exploitation of CVE-2024-55591, a critical vulnerability affecting Fortinet Fortigate firewalls, too many vulnerable devices are still accessible from the Internet and open to attack: over 48,000, according to data from the Shadowserver Foundation. CVE-2024-55591 exploitation On January 10, Artic Wolf Labs researchers outlined an attack campaign targeting FortiGate firewalls with management interfaces exposed on the public internet by exploiting a zero-day vulnerability. It involved attackers scanning … More →

The post 48,000+ internet-facing Fortinet firewalls still open to attack appeared first on Help Net Security.

DataDome unveiled DDoS Protect, a cloud-based service designed to block distributed denial-of-service (DDoS) attack traffic at the edge before it overwhelms an organization’s infrastructure. DDoS Protect provides always-on, full-stack protection that detects and mitigates application layer-based threats, including evasive and short-lived Layer 7 DDoS attacks, within milliseconds. The solution safeguards businesses against service downtime, wasted resources, and reputational damage resulting from DDoS attacks. Layer 7 DDoS attacks are among the most challenging cybersecurity threats to … More →

The post DataDome DDoS Protect detects application layer-based threats appeared first on Help Net Security.

Исследователи раскрывают скрытые мотивы преступников.

A vulnerability has been found in gcaldaemon 1.0 Beta13 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Listener. The manipulation leads to numeric error. This vulnerability is known as CVE-2007-4980. The attack can be launched remotely. Furthermore, there is an exploit available.