New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

Expert Webinar: Critical SaaS Security Do's and Don'ts: Insights from 493 Companies

Get a sneak peek at 2024's threat landscape and lessons learned from an extensive study of 493 companies.

The SEC Won't Let CISOs Be: Understanding New SaaS Cybersecurity Rules

The SEC isn’t giving SaaS a free pass. Applicable public companies, known as “registrants,” are now subject to cyber incident disclosure and cyb... ...

Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware

A financially motivated threat actor known as UNC4990 is leveraging weaponized USB devices as an initial infection vector to target organiza... ...

Join the Webinar: Vendor Risk Management

Learn how to automate and streamline security reviews so that you can spend less time on repetitive work and more time strengthening your security posture. Join Vanta’s live session on Feb 27 at 10am PST to see their VRM solution in action. Register ...

Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader Malware

A pair of recently disclosed zero-day flaws in Ivanti Connect Secure (ICS) virtual private network (VPN) devices have been exploited to deliver a Rust... ...

New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

Malicious local attackers can obtain full root access on Linux machines by taking advantage of a newly disclosed security flaw in the GNU C library (a... ...

Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives

A Brazilian law enforcement operation has led to the arrest of several Brazilian operators in charge of the Grandoreiro malware. The Federal... ...

URGENT: Upgrade GitLab - Critical Workspace Creation Flaw Allows File Overwrite

GitLab once again released fixes to address a critical security flaw in its Community Edition (CE) and Enterprise Edition (EE) that could be exploited... ...

China-Linked Hackers Target Myanmar's Top Ministries with Backdoor Blitz

The China-based threat actor known as Mustang Panda is suspected to have targeted Myanmar's Ministry of Defence and Foreign Affairs as part ... ...

Expert Webinar: Critical SaaS Security Do's and Don'ts: Insights from 493 Companies

Get a sneak peek at 2024's threat landscape and lessons learned from an extensive study of 493 companies.