In response to a rising number of software supply chain attacks, Google has released a public report, Perspectives on Security. The report documents the latest security vulnerability trends and how best to address them. The report comes on the second anniversary of the SolarWinds attack, which cost nine federal agencies and over 100 private companies USD 100 billion to clear up.
CloudSEK, an Indian cybersecurity firm, has announced that cybercriminals have gained access to its Confluence documents and the Jira account of a compromised employee. The cybercriminal is claiming to offer up sensitive CloudSEK information on darknet forums including XVigil, ProjectX, Codebase, Jira, email, and social media accounts. CloudSEK refuted the cybercriminals’ claims, admitting threat actors had compromised only three customer purchase orders and information.
Google released a patch for its ninth zero-day vulnerability, CVE-2022-4262. The bug exposes the source code underlying several browsers and, if not fixed in time, may expose users to several attack vectors. Google is keeping secret the details relating to the bug until most users have completed the update.
GoTo, (formerly LogMeIn), has issued a formal security breach notification through its blog, indicating that cybercriminals have gained access to its development environment and cloud storage facilities. LastPass, a subsidiary of GoTo, has also issued a similar update to customers. However, no passwords have been stolen and little or no sensitive data has been leaked, as of the present time.
The Federal Government of Australia passed a bill announcing increases in fines against companies involved in, or those failing to protect users against, data breaches. The amendment is mainly aimed at larger corporations in light of a slew of data breaches that were inadequately addressed in the past. It increases the total fine from 2.2 to 50 million AUD.
When you set up a VPN on a router, firewall, operating system (OS), or security solution, it’ll ask you to choose a VPN protocol. Some of these protocols are fairly new. Others are decades old. One of these ancient VPN protocols is the Point-to-Point Tunneling Protocol, or PPTP for short. This post looks closely at PPTP, one of the fastest and oldest VPN protocols. We’ll talk about what it is, how it works, its benefits, its disadvantages, and more.
Let’s take a closer look at IKEv2, one of the fastest and most secure VPN protocols on the planet. We’ll talk about how it works, its benefits, and disadvantages, how it compares to OpenVPN, and more.
Although the average person may not encounter a substantial amount of emails, businesses and people within these businesses use email every day. Unfortunately, cybercriminals often use this common messaging tool as an attack vector. In this article, you’ll learn everything you need to know about email security policies. You’ll also learn about the 5 policies you simply can’t ignore as well as some tips for creating an email security policy document.
Data science is a cross between different sectors. The demand for it proves the need for skill diversity for future tech employees. Mastering one skill isn’t enough anymore. To make it in tech, employees need to combine their basic skills with other advanced skills.
A fake Eli Lilly Twitter account announced selling insulin for free. While Eli Lilly quickly denied the announcement, the social engineering attack cost the company over USD15 billion in market cap.
