OAuth+XSS Attack Threatens Millions of Web Users With Account Takeover
Critical API security flaws (within the Hotjar service that tracks and records Web user activity, and the popular Business Insider global news website…
Day: July 29, 2024
7 Sessions Not to Miss at Black Hat USA 2024
COMMENTARYAs always, Black Hat USA 2024 promises to be a treasure trove of insights for cybersecurity professionals. The artificial intelligence craze…
Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails
An unknown threat actor has been linked to a massive scam campaign that exploited an email routing misconfiguration in email security vendor Proofpoin…
Millions of Websites Susceptible XSS Attack via OAuth Implementation Flaw
Salt Labs, the research arm of API security firm Salt Security, has discovered and published details of a cross-site scripting (XSS) attack that could…
Acronis Product Vulnerability Exploited in the Wild
Cybersecurity and data protection technology company Acronis last week warned that threat actors are exploiting a critical-severity vulnerability patc…
4.3 Million Impacted by HealthEquity Data Breach
HealthEquity is notifying 4.3 million individuals that their personal and health information was compromised in a data breach at a third-party vendor.…
How Searchable Encryption Changes the Data Security Game
Searchable Encryption has long been a mystery. An oxymoron. An unattainable dream of cybersecurity professionals everywhere.
Organizations know they m…
SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024
A total of 178 cybersecurity-related merger and acquisition deals were announced in the first half of 2024, representing the least busy half year sinc…
Selenium Grid Instances Exploited for Cryptomining
Cloud security giant Wiz has detailed a campaign in which threat actors have targeted exposed Selenium Grid instances for cryptocurrency mining.
Selen…
‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread
A threat actor known as Stargazer Goblin has set up a network of inauthentic GitHub accounts to fuel a Distribution-as-a-Service (DaaS) that propagate…