FreshRSS

πŸ”’
❌ Secure Planet Training Courses Updated For 2019 - Click Here
There are new available articles, click to refresh the page.
☐ β˜† βœ‡ The Hacker News

Confidence in File Upload Security is Alarmingly Low. Why?

By: The Hacker News β€” November 7th 2023 at 11:56
Numerous industriesβ€”including technology, financial services, energy, healthcare, and governmentβ€”are rushing to incorporate cloud-based and containerized web applications.Β  The benefits are undeniable; however, this shift presents new security challenges.Β  OPSWAT's 2023 Web Application Security reportΒ reveals: 75% of organizations have modernized their infrastructure this year. 78% have
☐ β˜† βœ‡ The Hacker News

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

By: THN β€” August 12th 2023 at 07:03
European and U.S. law enforcement agencies have announced the dismantling of a bulletproof hosting service provider calledΒ Lolek Hosted, which cybercriminals have used to launch cyber-attacks across the globe. "Five of its administrators were arrested, and all of its servers seized, rendering LolekHosted.net no longer available," EuropolΒ saidΒ in a statement. "The service facilitated the
☐ β˜† βœ‡ The Hacker News

Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits

By: Ravie Lakshmanan β€” June 14th 2023 at 10:21
At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositories on the code hosting service. All seven repositories, which are still available as of writing, claim to be a proof-of-concept (PoC) exploit for purported zero-day flaws in Discord, Google Chrome, and Microsoft Exchange Server. VulnCheck,
☐ β˜† βœ‡ The Hacker News

GitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git Operations

By: Ravie Lakshmanan β€” March 24th 2023 at 11:06
Cloud-based repository hosting service GitHub said it took the step of replacing its RSA SSH host key used to secure Git operations "out of an abundance of caution" after it was briefly exposed in a public repository. The activity, which was carried out at 05:00 UTC on March 24, 2023, is said to have been undertaken as a measure to prevent any bad actor from impersonating the service or
❌