Researchers Scan for Supply-Side Threats in Open Source
A recent project to scan the main Python repository's 268,000 packages found only a few potentially malicious programs, but work earlier this year uncovered hundreds of instances of malware.Open...
EFF, Security Experts Condemn Politicization of Election Security
Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database
CVE-2020-28092PUBLISHED: 2020-11-17PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id=
CVE-2020-28914PUBLISHED: 2020-11-17
An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When...
“Commercial Drug Lab” Discovered During Drug Raids in Cologne
Police in Cologne, Germany, arrested four suspected drug dealers as part of an investigation into a large-scale darkweb drug trafficking operation.Since April 2018, the suspects allegedly distributed 279 kilograms...
Twitter names famed hacker ‘Mudge’ as head of security
Social media giant Twitter, under increased threat of regulation and plagued by serious security breaches, is appointing one of the world’s best-regarded hackers to tackle everything from engineering missteps...
Robot enforces mask-wearing, distancing at store in Japan
A robot has signed on as the newest staff member at a store in Japan, taking on the job of ensuring customers wear masks and practice social distancing to...
Cisco Patches Critical Flaw After PoC Exploit Code Release
A critical path-traversal flaw (CVE-2020-27130) exists in Cisco Security Manager that lays bare sensitive information to remote, unauthenticated attackers.
A day after proof-of-concept (PoC) exploit code was published for a...
Multiple Industrial Control System Vendors Warn of Critical Bugs
Four industrial control system vendors each announced vulnerabilities that ranged from critical to high-severity.
Industrial control system firms Real Time Automation and Paradox both warned of critical vulnerabilities Tuesday...
Chinese APT Hackers Target Southeast Asian Government Institutions
By: Ravie Lakshmanan
Cybersecurity researchers today unveiled a complex and targeted espionage attack on potential government sector victims in South East Asia that they believe was carried out by a...
