Security

Exim mail servers worldwide need urgent patches

Exim mail servers worldwide need urgent patches

Three out of six issues already fixed.
Oct 4 2023 10:33AM
Malware once again a headache for npm

Malware once again a headache for npm

Fortiguard finds data-thieving packages.
Oct 4 2023 10:32AM
Singtel to sell stake in cybersecurity arm Trustwave for US$205 million

Singtel to sell stake in cybersecurity arm Trustwave for US$205 million

After incurring impairment in 2021.
Oct 4 2023 9:46AM
Another Progress Software file transfer utility vulnerable

Another Progress Software file transfer utility vulnerable

WS_FTP has critical deserialisation bug.
Oct 3 2023 12:44PM
Advisory Group to help CSA develop professional cybersecurity framework

Advisory Group to help CSA develop professional cybersecurity framework

Part of the agency's 3-year, S$50 million Cyber TIG plan.
Oct 3 2023 9:31AM
CISA warns China's BlackTech had control of routers

CISA warns China's BlackTech had control of routers

Modified firmware helped state actors snoop on traffic.
Oct 2 2023 2:15PM
"Marvin" breathes new life into Bleichenbacher's timing oracle attack

"Marvin" breathes new life into Bleichenbacher's timing oracle attack

RSA PKCS#1 v1.5 encryption is ancient and should not be used.
Sep 27 2023 12:24PM
Salesforce cloud outage caused by security change

Salesforce cloud outage caused by security change

Goes public with post-mortem.
Sep 27 2023 12:23PM
Juniper Networks acknowledges new spin on firewall vulnerability

Juniper Networks acknowledges new spin on firewall vulnerability

Patches against fileless RCE.
Sep 27 2023 12:23PM
Philippine Health Insurance Corporation probes cyber attack

Philippine Health Insurance Corporation probes cyber attack

Implements containment measures following Medusa ransomware breach.
Sep 25 2023 9:53AM
GitLab patches critical vulnerability

GitLab patches critical vulnerability

Attacker could imitate other users.
Sep 20 2023 3:16PM
Google warns security researchers of North Korean campaign

Google warns security researchers of North Korean campaign

Attackers used as-yet-unpatched zero-day.
Sep 11 2023 11:25AM
Cisco SSO authentication bug patched

Cisco SSO authentication bug patched

BroadWorks platforms vulnerable.
Sep 7 2023 3:23PM
Crash log exposed Microsoft Outlook keys to threat actor

Crash log exposed Microsoft Outlook keys to threat actor

How July’s Storm-0558 attack happened.
Sep 7 2023 3:22PM
Palo Alto Networks closes door on TunnelCrack

Palo Alto Networks closes door on TunnelCrack

Configuration checks needed, rather than patches.
Aug 23 2023 11:55AM
Singapore enhances OT security through international partnerships

Singapore enhances OT security through international partnerships

Teams up with Dragos and CISA.
Aug 23 2023 9:35AM
North Korean hackers target US-South Korea military drills

North Korean hackers target US-South Korea military drills

Police say no classified information has been compromised.
Aug 21 2023 12:00PM
US cyber body to review cloud computing safety, Microsoft breach

US cyber body to review cloud computing safety, Microsoft breach

Imperative that we understand the vulnerabilities, says DHS.
Aug 14 2023 1:12PM
Azure bug allowed password theft, researcher says

Azure bug allowed password theft, researcher says

Tenable CEO critical of slow fix, transparency.
Aug 7 2023 1:26PM
Credential issues accounted for over half of cloud compromises in Q1 2023

Credential issues accounted for over half of cloud compromises in Q1 2023

Requires strong identity management to mitigate risks, says report.
Aug 7 2023 10:14AM