EU and US Banks Found Leaking Customer Data via Advertising Trackers
Tracking pixels embedded in banking websites have been quietly transmitting customer data to advertising platforms,…
Tag: regulation
OpenSSL Memory Exhaustion Flaw ‘HollowByte’ Patched Quietly, With No CVE or Advisory
An 11-byte TLS payload can lock up to 131 KB of server memory indefinitely on…
Russian Intelligence Exploiting Internet-Connected Cameras to Monitor NATO Logistics and Ukrainian Forces
Dutch intelligence warns that at least one Russian agency is systematically compromising network cameras across…
CISA Mandates Federal Patch for Critical Adobe ColdFusion Vulnerability
US agencies have until Friday to remediate a maximum-severity ColdFusion flaw that is being actively…
NCSC Distils Pen Tester Wisdom Into Practical Hardening Advice
The UK's National Cyber Security Centre has published guidance drawn from penetration testing experience to…
CISA Orders Federal Agencies to Patch Actively Exploited Cisco Unified Communications Flaw by Sunday
A vulnerability in Cisco Unified Communications Manager is under active exploitation, prompting CISA to impose…
DHS chief says president has met with potential CISA nominee; agency plans to hire 600
What security leaders need to know about the affected systems.
CISA Flags Active Exploitation of Critical Splunk Enterprise Vulnerability
US federal agencies have until Sunday to patch a critical Splunk Enterprise flaw that attackers…
CISA Mandates Federal Patch for Maximum-Severity Joomla JCE Plugin Flaw
Active exploitation of a critical vulnerability in the widely used JCE plugin has prompted CISA…
CISA Issues Three-Day Patch Mandate for Exploited Ivanti Sentry Flaw
Federal agencies must remediate actively exploited vulnerability under new binding operational directive by Sunday.