SAIC Appoints Kevin Brown as Chief Information Security Officer
RESTON, Va.--(BUSINESS WIRE)--Science Applications International Corp. (NYSE: SAIC) today announced that Kevin Brown has joined the company as chief information security officer (CISO). In this role, Brown leads the...
FamousSparrow APT Group Flocks to Hotels, Governments, Businesses
A cyberespionage group dubbed FamousSparrow is targeting hotels, governments, and private businesses around the world, leveraging the ProxyLogon Microsoft Exchange Server vulnerability along with its own custom backdoor, SparrowDoor.
ESET...
FamousSparrow APT Wings in to Spy on Hotels, Governments
A custom “SparrowDoor” backdoor has allowed the attackers to collect data from targets around the globe.
A cyberespionage group dubbed “FamousSparrow” by researchers has taken flight, targeting hotels, governments and...
5 Tips for Achieving Better Cybersecurity Risk Management
Casey Ellis, founder, CTO and chairman of Bugcrowd, discusses a roadmap for lowering risk from cyberattacks most effectively.
When thinking about cybersecurity risk management, think about the last time you...
Colombian Real Estate Agency Leak Exposes Records of Over 100,000 Buyers
By: Ravie Lakshmanan
More than one terabyte of data containing 5.5 million files has been left exposed, leaking personal information of over 100,000 customers of a Colombian real estate firm,...
Microsoft Exchange Bug Exposes ~100,000 Windows Domain Credentials
By: Ravie Lakshmanan
An unpatched design flaw in the implementation of Microsoft Exchange's Autodiscover protocol has resulted in the leak of approximately 100,000 login names and passwords for Windows domains...
100M IoT Devices Exposed By Zero-Day Bug
A high-severity vulnerability could cause system crashes, knocking out sensors, medical equipment and more.
A flaw in a widely used internet-of-things (IoT) infrastructure code left more than 100 million...
NIST Brings Threat Modeling into the Spotlight
One noteworthy element of the National Institute of Standards and Technology's recent Recommended Minimum Standard for Vendor or Developer Verification of Code is the prominence given to threat modeling, which is...
Apple Patches Zero-Days in iOS, Known Vuln in macOS
Apple today released security updates for three vulnerabilities in iOS and one flaw in macOS Catalina. Two of the iOS flaws may have been actively exploited, while exploits for...
10 top API security testing tools
Application programming interfaces (APIs) are a critical part of most modern programs and applications. In fact, both cloud deployments and mobile applications have come to rely so heavily on...
