What Is Network Security?
An introduction to network security: layered defences, endpoint and cloud security, and identity and access management.
Comments Off on What Is Network Security?
May 19, 2023
We will delve into the world of vulnerabilities, their impact on cybersecurity, and how our platform can keep you informed with the latest insights, analysis, and mitigation strategies.
Understanding vulnerabilities is crucial for effective cybersecurity measures. We provide detailed insights into various types, including software, network, and human-related vulnerabilities like social engineering. By understanding the nature and characteristics, you gain the knowledge needed to mitigate risks and implement robust security measures.
What Are Data Breaches?
How data breaches happen, how to prevent and contain them, and the regulations such as GDPR and CCPA that shape breach response.
Comments Off on What Are Data Breaches?
May 19, 2023
What Are Cyber Attacks?
Phishing, malware, ransomware and denial-of-service: the main types of cyber attack, how they work and how to defend against them.
Comments Off on What Are Cyber Attacks?
May 19, 2023
Critical 9.8KEVCVE-2023-27524
Apache Superset Default Key Flaw Exposes Servers to RCE Attacks
Apache Superset installs that kept the default SECRET_KEY (CVE-2023-27524, now in CISA KEV) let attackers forge admin sessions. Update to 2.1 and set a random key.
Comments Off on Apache Superset Default Key Flaw Exposes Servers to RCE Attacks
April 28, 2023
Critical 9.8CVE-2023-28121
WooCommerce Payments Plugin Flaw Patched
A critical flaw in WooCommerce Payments 4.8.0 to 5.6.1 (CVE-2023-28121) let unauthenticated attackers impersonate an admin and take over stores.
Comments Off on WooCommerce Payments Plugin Flaw Patched
March 25, 2023
Medium 6.5CVE-2023-25136
OpenSSH 9.2 Fixes Pre-Authentication Double Free Flaw
OpenSSH 9.2 fixes CVE-2023-25136, a pre-authentication double free in sshd 9.1. It is considered hard to exploit because of sandboxing.
Comments Off on OpenSSH 9.2 Fixes Pre-Authentication Double Free Flaw
February 28, 2023
High 8.8KEVCVE-2023-23529 · CVE-2023-23514
Apple Patches New Zero-Day Flaw Across iOS, macOS and Safari
Apple patched an exploited WebKit type confusion zero-day (CVE-2023-23529) and a kernel use-after-free in iOS 16.3.1, macOS 13.2.1 and Safari 16.3.1.
Comments Off on Apple Patches New Zero-Day Flaw Across iOS, macOS and Safari
February 28, 2023