Proposed government changes to anti-money laundering rules around pooled client accounts could raise issues around client confidentiality and privilege, experts have warned. The post AML reforms could see banks ask…
A practising barrister has for the first time been added to HM Revenue & Customs’ list of tax avoidance promoters. The post Practising barrister named a tax avoidance promoter in…
The government claimed yesterday that “our reforms are working” after the latest county court statistics showed that delays continued to fall against the backdrop of a rising workload. The post…
The vulnerability marks the latest example of threat actors weaponizing exposed ASP.NET machine keys for remote injection and deserialization attacks. – Read More
A sample ASP.NET machine key in old deployment guides for Sitecore products is being exploited by attackers to launch ViewState code injection attacks that compromise servers. According to Google’s Mandiant…
Reports of disruptions at North American plants emerged earlier this week, though the nature of the attack on the tire manufacturer remains unclear. – Read More
New threat actor “GhostRedirector” is using a malicious IIS module to inject links that try to artificially boost search engine ranking for target sites. – Read More
The Nonprofit organization launched the Threat Handling Foundations Certificate amid mounting incident and breach disclosures. – Read More
What’s believed to be a global phishing-as-a-service enterprise using cloaking techniques has been riding on public cloud infrastructure for more than 3 years. – Read More
Czech cyber agency NÚKIB warned of the risks of using products and software that send data back to China. – Read More
The Russian state-sponsored hacking group tracked as APT28 has been attributed to a new Microsoft Outlook backdoor called NotDoor in attacks targeting multiple companies from different sectors in NATO member…
Cybersecurity researchers have lifted the lid on a previously undocumented threat cluster dubbed GhostRedirector that has managed to compromise at least 65 Windows servers primarily located in Brazil, Thailand, and…
Many high-profile Salesloft Drift customers have disclosed data breaches as a result of a recent supply-chain attack, but the extent and severity of this campaign are unclear. – Read More
The addition of Black Duck’s application security testing offering to UltraViolet Cyber’s portfolio helps security teams find and remediate issues earlier in the security lifecycle. – Read More
Auch IT-Unternehmen, selbst im Bereich Cyber-Security sind nicht vor erfolgreichen Cyber-Attacken gefeit. PeopleImages.com – Yuri A/ Shutterstock.com Palo Alto Networks, ZScaler und Cloudflare haben bekannt gegeben, dass sie von einem…