Cybersecurity Blog
New ‘Siren’ Mailing List Aims to Share Threat Intelligence for Open Source Projects
The Open Source Security Foundation (OpenSSF) announced a new email mailing list named Siren that aims to spread threat ...
QNAP QTS Zero-Day in Share Feature Gets Public RCE Exploit
An extensive security audit of QNAP QTS, the operating system for the company’s NAS products, has uncovered ...
Five Core Tenets Of Highly Effective DevSecOps Practices
One of the enduring challenges of building modern applications is to make them more secure without disrupting ...
Void Manticore Launches Destructive Attacks on Albania and Israel
Void Manticore utilizes five different methods to conduct disruptive operations against its victims. This includes ...
Chinese Telco Gear May Get Banned in Germany
Germany is considering banning the use of Huawei and ZTE equipment in its 5G networks due to national security concerns, ...
CISA Warns of Actively Exploited NextGen Mirth Connect Pre-Auth RCE Vulnerability
The CISA has required federal agencies to update to a patched version of Mirth Connect (version 4.4.1 or later) by June ...
Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox
A critical security flaw has been disclosed in the llama_cpp_python Python package that could be exploited by threat ...
Consumers Continue to Overestimate Their Ability to Spot Deepfakes
The Jumio 2024 Online Identity Study reveals that while consumers are increasingly concerned about the risks posed by ...