Dept. of Energy Launches Plan to Protect Electric Grid from Cyberattack
Over the next 100 days, the DoE will work with electric utilities to improve visibility, detection, and response for industrial control systems.The US Department of Energy today announced a...
Attackers Compromised Code-Checking Vendor’s Tool for Two Months
A script used to upload sensitive reports-with access to credentials and datastores-likely sent information on hundreds, possibly thousands, of companies to attackers.In a software supply-chain attack reminiscent of the...
Foreign Spies Target British Nationals With Fake Social Media Profiles
Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database
CVE-2020-7856PUBLISHED: 2021-04-20A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation.
CVE-2021-28793PUBLISHED: 2021-04-20vscode-restructuredtext before...
Codecov hackers breached hundreds of restricted customer sites: sources
Hackers who tampered with a software development tool from a company called Codecov used that program to gain restricted access to hundreds of networks belonging to the San Francisco...
Apple to bring social media platform Parler back to App Store
Apple Inc will bring social media app Parler, favored by U.S conservatives, back to its App Store after the iPhone maker pulled it following the deadly Jan. 6 U.S....
Beware the Bug Bounty
In recent months, bug-bounty programs have shifted from mitigating risk to inadvertently creating new liabilities for customers and vendors.
Bug-bounty programs have accelerated in the past few years. Many organizations...
Facebook Messenger users hit by scammers in over 80 states
Over 1,000 fake Facebook accounts were discovered in a large-scale scam aimed at Facebook Messenger users in over 80 countries worldwide, claims research by a team of analysts at...
