Attackers continue to target unpatched Pulse Secure VPN systems
The Cybersecurity and Infrastructure Security Agency (CISA) issued a new warning that attackers continue to target unpatched Pulse Secure VPN systems.
Juniper Networks security updates for multiple products
Juniper Networks has released security advisories to fix vulnerabilities on multiple products this week.
Firefox security update (72.0.1) fixes Critical vulnerability under attack
Just a day after releasing Firefox 72, the Mozilla Foundation released a new security update 72.0.1 that addresses a critical security vulnerability under active attack.
Google releases Chrome security update (79.0.3945.117)
Google has released Chrome 79.0.3945.117 for Windows, Mac and Linux. The update includes three security fixes. The company also added a Chrome browser update for Android.
Travelex hit with major ransomware attack (updated)
Travelex was hit with a major ramsomware attack on New Years eve. The cyber attacks forced the company to take down all computers and revert to use pen and paper.
Mozilla releases Firefox 72 with browser fingerprinting protections
The Mozilla Foundation has released Firefox 72 with browser fingerprinting protections built in. In addition the latest update also addresses ten security vulnerabilities.
High severity OpenCV buffer overflow vulnerabilities
Cisco's Talos security group has released details on two High severity buffer overflow vulnerabilities that affect OpenCV libraries.
DHS reissues National Terrorism Advisory System (NTAS) Bulletin
The Department of Homeland Security (DHS) has reissued a National Terrorism Advisory System (NTAS) bulletin after a lethal U.S. strike killed Iranian IRGC-Quds Force commander Qassem Soleimani on January 2, 2020 while Soleimani was in Iraq.
OWASP API Security Top 10 2019
The Open Web Application Security Project (OWASP) has released its OWASP API Security Top 10 2019. This is the first version of the API Top 10 that OWASP will likely update every three to fours years, similar to its other Top 10 series.
Cisco patches 3 critical vulnerabilities in Data Center Network Manager software
Cisco has patched three critical vulnerabilities in its Data Center Network Manager (DCNM) software that could allow an attacker to bypass authentication. In addition, six High and two Medium severity DCNM software bugs were also addressed.