Advertisement
- Don't Miss:
- CSO50 2022 Award Winners
- CSO Hall of Fame honorees
Part of Twitter source code leaked on GitHub
Twitter has filed a case in the US District Court for the Northern District of California seeking GitHub to identify the person who shared the code.
France bans TikTok, all social media apps from government devices
French government says TikTok and all other “recreational apps” pose data security risks if installed on government and senior official devices.
Best practices for protecting AWS RDS and other cloud databases
The Relational Database Service from AWS can help streamline a host of cloud storage operations, but maintaining security requires some attention on the part of the user. Here are some best practices for using RDS.
Advertisement
Critical flaw in WooCommerce can be used to compromise WordPress websites
The vulnerability could allow unauthenticated administrative takeover of websites. WooCommerce has released an update.
Cyberpion rebrands as Ionix, offering new EASM visibility improvements
Ionix is adding a suite of new features to help extend the visibility of interconnected assets and deliver risk-based prioritization.
Android-based banking Trojan Nexus now available as malware-as-a-service
The recently evolved version of Nexus has targeted more than 450 banks and cryptocurrency services. Multiple threat actors are already found to be using Nexus to conduct fraudulent campaigns.
Critical flaw in AI testing framework MLflow can lead to server and data compromise
The now-patched vulnerability in the popular MLflow platform could expose AI and machine-learning models stored in the cloud and allow for lateral movement.
UK parliament follows government by banning TikTok over cybersecurity concerns
TikTok calls the UK ban “misguided” while its chief executive faced tough questioning by the US House of Representatives over whether the popular app is a “tool” of the Chinese Communist Party.
The CSO guide to top security conferences
Tracking postponements, cancellations, and conferences gone virtual — CSO Online’s calendar of upcoming security conferences makes it easy to find the events that matter the most to you.
Russian hacktivists deploy new AresLoader malware via decoy installers
The new malware loader can give attackers remote access and the ability to deliver other payloads.
Advertisement
Security at the core of Intel’s new vPro platform
In what the chipmaker claims is an industry first, the latest processor line from Intel will incorporate threat detection right into the hardware, bolstering EDR and other cybersecurity platforms.
New vulnerabilities found in industrial control systems of major vendors
The US Cybersecurity and Infrastructure Security has revealed new vulnerabilities in the industrial systems from leading vendors including Siemens, Delta Electronics, Hitachi and Rockwell.
How training and recognition can reduce cybersecurity stress and burnout
Cybersecurity professionals suffering from stress and burnout can be less productive, more prone to mistakes, and increasingly likely to quit. With the right training and recognition, CISOs can reduce stress and burnout in their teams....
Splunk adds new security and observability features
New security and observability features will be added to Splunk Mission Control and its Observability Cloud to identify threats and incidents more efficiently, the company said.
55 zero-day flaws exploited last year show the importance of security risk management
Cybercriminals are now exploiting zero-day vulnerabilities for higher profits, which might require a reassessment of your risk.
From Our Advertisers
-
Featured Sponsor IntelCompetitive Advantage with a Modern Data Center that Delivers Boundless Agility
-
Sponsored by FortinetThe latest intel on wipers
-
Sponsored by CyberArkWhy the phishing blame game misses the point
-
Sponsored by Microsoft SecurityCloud security is incomplete without hybrid and multicloud coverage