Artifact Poisoning in GitHub Actions Imports Malware via Software Pipelines
An attacker submitting changes to an open source repository on GitHub could cause downstream software projects that include the latest version of a component to compile updates with malicious...
LastPass Discloses Second Breach in Three Months
An attacker who breached the software development environment at LastPass this August and stole source code and other proprietary data from the company appears to have struck the password...
LastPass Suffers Another Security Breach; Exposed Some Customers Information
By: Ravie Lakshmanan
Popular password management service LastPass said it's investigating a second security incident that involved attackers accessing some of its customer information.
"We recently detected unusual activity within a...
Hackers Leak Another Set of Medibank Customer Data on the Dark Web
By: Ravie Lakshmanan
Medibank on Thursday confirmed that the threat actors behind the devastating cyber attack have posted another dump of data stolen from its systems on the dark web...
CyberRatings.org Announces Results from First-of-its-Kind Comparative Test on Cloud Network Firewall
AUSTIN, Texas, Dec. 1, 2022 /PRNewswire/ — CyberRatings.org, the non-profit entity dedicated to providing transparency on cybersecurity product efficacy, has completed an independent test of eight market leading security...
IBM Cloud Supply Chain Vulnerability Showcases New Threat Class
A vulnerability in IBM Cloud databases for PostgreSQL could have allowed attackers to launch a supply chain attack on cloud customers by breaching internal IBM Cloud services and disrupting...
Google TAG Warns on Emerging Heliconia Exploit Framework for RCE
Google's Threat Analysis Group (TAG) has discovered a cyberattack framework dubbed Heliconia, built to exploit zero-day and n-day vulnerabilities in Chrome, Firefox, and Microsoft Defender. It likely has connections...
Australia Passes Bill to Fine Companies up to $50 Million for Data Breaches
By: Ravie Lakshmanan
The Australian government has passed a bill that markedly increases the penalty for companies suffering from serious or repeated data breaches.
To that end, the maximum fines have...
French Electricity Provider Fined for Storing Users’ Passwords with Weak MD5 Algorithm
By: Ravie Lakshmanan
The French data protection watchdog on Tuesday fined electricity provider Électricité de France €600,000 for violating the European Union General Data Protection Regulation (GDPR) requirements.
The Commission nationale...
CyberRatings.org Revives NSS Labs Research
AUSTIN, Texas, Nov. 29, 2022
/PRNewswire/ — CyberRatings.org, the nonprofit entity dedicated to
providing transparency on cybersecurity product efficacy, has launched
The NSS Labs archive, a library of over 800 test reports,...
