Authorities Lag Against Fast-Evolving Cyberspace Threats: Report
And while the US remains the dominant cyberspace power, China is rapidly gaining ground and could soon be a major rival in both the civil and military spheres, the Britain-based research group said after a two-year study. “All countries are still in the early stages of coming to terms with the strategic implications of cyberspace,”…
Noname Security Raises $60 Million in Series B Funding
Founded in 2020, the Silicon Valley-based enterprise API security startup aims to help organizations secure both managed and unmanaged APIs. The startup says it has seen fast growth since emerging from stealth in December 2020. Over the past six months, the company has attracted 40 channel, reseller, and technology partners, while also adding hundreds of…
UN Security Council Confronts Growing Threat of Cyber Attacks
At their summit earlier this month in Geneva, the US president set out red lines for Russia, which is often accused of being behind major hacks. In this case, he laid out 16 “untouchable” entities, ranging from the energy sector to water distribution. “This is the generic list of critical infrastructure which every country has,”…
Malvuln Project Catalogues 260 Vulnerabilities Found in Malware
Malvuln, an interesting project of security researcher John Page (aka hyp3rlinx), catalogues vulnerabilities discovered in malware and provides information on how those vulnerabilities can be exploited. Since launching the project in early January 2021, Page has discovered more than 260 vulnerabilities across an estimated 105 individual malware families, including trojans, worms, backdoors, droppers, and ransomware….
XSS Vulnerability in Cisco Security Products Exploited in the Wild
Reports of in-the-wild exploitation emerged shortly after cybersecurity firm Positive Technologies released a proof-of-concept (PoC) exploit for the vulnerability tracked as CVE-2020-3580. Others also released PoC exploits shortly after. CVE-2020-3580 is one of the several XSS vulnerabilities patched in October 2020 by Cisco in its ASA and FTD products. Some of these flaws were reported…
GitHub Paid Out Over $1.5 Million via Bug Bounty Program Since 2016
According to the company, in 2020, it paid out over half a million dollars for more than 200 vulnerabilities affecting its products and services. The amount is roughly the same as in the previous year. GitHub said it received more than 1,000 submissions through its public and private bug bounty programs, and claimed that its…
Google Rolling Out Security Update for Google Drive
With this update, the search advertising giant is adding a resource key to sharing links, which will impact access to the files for those users who haven’t yet viewed the files. “Once the update has been applied to a file, users who haven’t viewed the file before will have to use a URL containing the…
Old Vulnerability Exploited to Hack, Wipe WD Storage Devices
Victims said a factory reset had been initiated on their device, which resulted in all files being erased. Some users reported losing very important data. WD NAS device vulnerability exploitedOne post on the WD Community forum received more than 160 replies and it has been viewed nearly 15,000 times in just over 24 hours. A…
EU Announces New Joint Cyber Unit to Protect Against Critical Attacks
The cyber threat to critical infrastructure has grown dramatically over the last few years – to such an extent that western governments are finally accepting that they need to get more involved. In the EU, this has taken the form of a new Joint Cyber Unit (JCU), situated next to ENISA’s offices in Brussels. ENISA…
Cybersecurity Companies Join Forces Against Controversial DMCA Section
The DMCA is a copyright law that was passed in 1998. It prohibits the production and dissemination of technology, devices, or services designed to circumvent measures that control access to copyrighted works. One section of the DMCA, section 1201, has posed some problems for the cybersecurity community. According to the U.S. Copyright Office, “section 1201…
