The flaw was nearly identical to last year's CitrixBleed flaw, though not as severe.
| | | LATEST SECURITY NEWS & COMMENTARY | | Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway The flaw was nearly identical to last year's CitrixBleed flaw, though not as severe. Microsoft Will Hold Executives Accountable for Cybersecurity At least a portion of executive compensation going forward will be tied to meeting security goals and metrics. Billions of Android Devices Open to 'Dirty Stream' Attack Microsoft has uncovered a common vulnerability pattern in several apps allowing code execution; at least four of the apps have more than 500 million installations each; and one, Xiaomi's File Manager, has at least 1 billion installations. AT&T Splits Cybersecurity Services Business, Launches LevelBlue The new company will focus on cybersecurity services as a top 10 managed security service provider, but must expand outside the low-margin management of security into detection and response. UK Military Data Breach a Reminder of Third-Party Risk in Defense Sector An attacker accessed personal information of over 225,000 active, reserve, and former UK military members from third-party payroll processing system. Critical GitLab Bug Under Exploit Enables Account Takeover, CISA Warns Patch now: Cyberattackers are exploiting CVE-2023-7028 (CVSS 10) to take over and lock users out of GitLab accounts, steal source code, and more. Dropbox Breach Exposes Customer Credentials, Authentication Data Threat actor dropped in to Dropbox Sign production environment and accessed emails, passwords, and other PII, along with APIs, OAuth, and MFA info. Chinese Hackers Deployed Backdoor Quintet to Down MITRE MITRE's hackers made use of at least five different Web shells and backdoors as part of their attack chain. CISOs Are Worried About Their Jobs & Dissatisfied With Their Incomes The research shows a significant drop in the number of tech CISOs that got a base salary increase in the past year — roughly 18% year-over-year. 3-Year Iranian Influence Op Preys on Divides in Israeli Society Iran follows in Russia's disinformation footsteps but with a different, more economical, and potentially higher-impact model. Supply Chain Breaches Up 68% Year Over Year, According to DBIR As Verizon Business redefines "supply chain breach," it could either help organizations address third-party risk holistically or just conflate and confuse. Spies Among Us: Insider Threats in Open Source Environments Does the open source ecosystem needs stricter security around contributors? The Psychological Underpinnings of Modern Hacking Techniques The tactics employed by hackers today aren't new; they're simply adapted for the digital age, exploiting the same human weaknesses that have always existed. MORE NEWS / MORE COMMENTARY | | | | | | PRODUCTS & RELEASES | | Cyolo Partners With Dragos to Unveil Holistic Secure Remote Access Solution for Critical Infrastructure runZero Research Explores Unexpected Exposures in Enterprise Infrastructure BigID Launches Hybrid Scanning for Cloud Native Workloads Introducing the NetBeacon Institute: Empowering a Safer Web AttackIQ Partners With Cyber Poverty Line Institute to Provide Academy Courses to Underserved Communities AXA XL Introduces Endorsement to Help Public Companies Address SEC Cyber Reporting Costs MORE PRODUCTS & RELEASES |
|
Dark Reading Weekly
-- Published By Dark Reading
Informa Tech Holdings LLC | Registered in the United States
with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA
| | To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here. | | Thoughts about this newsletter? Give us feedback. |
Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: | | If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. | | We take your privacy very seriously. Please review our Privacy Statement. |
|
| |
