eSecurity Planet

APRIL 1, 2024

The US Cybersecurity & Infrastructure Security Agency (CISA) added this exploit to their vulnerability catalog indicating active exploitation in the wild. or above March 25, 2024 Hackers Pollute Python Package Index Open-Source Libraries Type of vulnerability (or attack): Malicious library code. Upgrade versions 7.2.0

Libraries 106

Libraries Authentication Artificial Intelligence Cloud 106

Security Affairs

MAY 27, 2022

The researchers demonstrated how to inject two types of basic touch events, taps and swipes, into targeted locations of the touchscreen. The events allowed the researchers to control the devices (i.e. “In places like a cafe, library, meeting room, or conference lobbies, people might place their smartphone face-down on the table2.

Paper 144

Paper Libraries Authentication Passwords 144

eSecurity Planet

DECEMBER 19, 2023

As 2023 draws to an end and cybersecurity budgeting is nearly complete, it helps to consider the year’s events and try to predict next year’s trends. After receiving input from industry experts and doing my own analysis of the year’s driving forces, I identified five major cybersecurity trends.

Cybersecurity 140

Cybersecurity Cloud Ransomware Risk 140

eSecurity Planet

OCTOBER 16, 2023

The past week has been an eventful one for cybersecurity vulnerabilities, from record DDoS attacks and three Microsoft zero-days to vulnerabilities in Linux, Apple, Citrix, and other widely used technologies. The problem: A memory corruption vulnerability in the open-source libcue library was reported by the GitHub Security Lab.

Libraries 101

Libraries Metadata Cybersecurity Security 101

KnowBe4

FEBRUARY 21, 2023

Employees play a role in organizational cybersecurity – Reddit mentions that "soon after being phished, the affected employee self-reported, and the security team responded quickly, removing the infiltrator's access and commencing an internal investigation." We are almost out of seats for this free event, so register now!

Phishing 69

Phishing Data breaches Security awareness Security 69

Thales Cloud Protection & Licensing

MARCH 10, 2021

That’s because many vendors have not incorporated adequate security controls within their connected products, which is driven (no pun intended) by a general lack of cybersecurity expertise and tight product delivery timelines and margins. First off, connected vehicles and IoT devices are highly attractive targets to hackers.

IoT 77

IoT Security Manufacturing Encryption 77

eSecurity Planet

MAY 4, 2023

IT asset management’s primary purpose is to manage the IT asset lifecycle, from purchase through retirement, but increasingly it has an important role to play in cybersecurity too by discovering and inventorying assets and identifying missing patches and other security vulnerabilities. See the Best Network Monitoring Tools 6.

IT 103

IT Compliance Cloud Cybersecurity 103