Software Composition Analysis (SCA): How Does It Help Keep Cloud Applications Secure?
In this cloud-native world, applications are more assembled than built. Instead of starting from scratch, developers leverage ready-made code components that were previously built and open sourced by others....
Wintermute repays $92M TrueFi loan on time despite suffering $160M hack
When Wintermute, a cryptocurrency market maker, lost $160 million due to a hack, concerns related to the repayment of debt worth $189.4 million surfaced. However, in an exciting turn...
Indian Energy Company Tata Power’s IT Infrastructure Hit By Cyber Attack
By: Ravie Lakshmanan
Tata Power Company Limited, India's largest integrated power company, on Friday confirmed it was targeted by a cyberattack.
The intrusion on IT infrastructure impacted "some of its IT...
Barely halfway and October already the biggest month in crypto hacks: Finance Redefined
Welcome to Finance Redefined, your weekly dose of essential decentralized finance (DeFi) insights — a newsletter crafted to bring you significant developments over the last week.October is historically associated...
Mango Market’s DAO forum set to approve $47M settlement with hacker
Following a $117 million exploit on Oct. 11, the Mango Markets community is set to make a deal with its hacker, allowing the hacker to keep $47 million as a...
Concerns Over Fortinet Flaw Mount; PoC Released, Exploit Activity Grows
Concerns over a critical authentication bypass vulnerability in certain Fortinet appliances heightened this week with the release of proof-of-concept (PoC) exploit code and at least one vulnerability scanner for...
Feature-Rich ‘Alchimist’ Cyberattack Framework Targets Windows, Mac, Linux Environments
Researchers have uncovered a potentially dangerous cyberattack framework targeting Windows, Linux, and Mac systems that they assess is likely already being used in the wild.The framework consists of a...
Novel npm Timing Attack Allows Corporate Targeting
A novel timing attack has emerged for targeting private corporate software packages hosted in the npm code repository. The idea is to uncover the legitimate offerings and then create...
Newly Introduced HackerOne Assets Goes Beyond Attack Surface Management To Close Security Gaps
SAN FRANCISCO, October 13, 2022: HackerOne, the leader in Attack Resistance Management, today announced the general availability of its HackerOne Assets product. Assets combines the core capabilities of Attack...
Cyberattackers Spoof Google Translate in Unique Phishing Tactic
Attackers are spoofing Google Translate in an ongoing phishing campaign that uses a common JavaScript coding technique to bypass email security scanners. Leveraging trust in Google Translate is a...
