Mar 06, 2025Ravie LakshmananData Security / Software Security Elastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution. The vulnerability, tracked as… Read More "Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution"
China’s hacker-for-hire industry According to court documents, among those charged are two officers from China’s Ministry of Public Security (MPS), while the remaining ten worked for Anxun Information Technology, commonly known as i-Soon, a private firm allegedly connected to China’s… Read More "US charges 12 Chinese hackers in major government-backed espionage campaign"
Job satisfaction levels for women working in cybersecurity have plummeted in the past two years, with just 67% reporting being satisfied in 2024 compared to 82% in 2022. The new ISC2 figures also found a drop-off among men working in… Read More "Cybersecurity Job Satisfaction Plummets, Women Hit Hardest"
As perimeter-based cyber protection falls to the wayside, a new breed of continuous security solutions are emerging that combine traditional endpoint protection with newer technologies like security information and event management (SIEM) and crowdsourced threat intelligence. These next generation security platforms attempt… Read More "AlienVault vs Tenable for Continuous Security"
Mar 06, 2025Ravie LakshmananData Breach / Website Security Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. “Creating four backdoors facilitates the attackers having multiple points of re-entry should one… Read More "Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access"
Modats Untersuchungen, die auf Daten aus der eigenen Magnify-Plattform basieren, haben gezeigt, dass viele Zutrittsmanagementsysteme ungeschützt mit gravierenden Sicherheitsmängeln im Internet liegen. Dies liegt den Experten zufolge hauptsächlich an falschen Konfigurationen, veralteten Protokollen und mangelnder Überwachung. Die Folgen können in… Read More "Access Management Systems sind offene Türen für Hacker"
The EU’s leading security agency has warned that six critical infrastructure (CNI) sectors are struggling to comply with the NIS2 directive. The directive was created in response to mounting threats to CNI across the region, mandating a strict new set… Read More "Six Critical Infrastructure Sectors Failing on NIS2 Compliance"
In India’s evolving financial sector, third-party risk management (TPRM) remains a cybersecurity necessity to ensure operational stability, data security, and regulatory compliance. Financial institutions across India continue to increase their reliance on external vendors and service providers for critical business… Read More "3 TPRM Challenges and Solutions in India’s Financial Sector"
The rapid adoption of cloud services, SaaS applications, and the shift to remote work have fundamentally reshaped how enterprises operate. These technological advances have created a world of opportunity but also brought about complexities that pose significant security threats. At… Read More "Identity: The New Cybersecurity Battleground"
Dr. Blythe added: “Employees who feel undervalued may experience reduced morale and productivity, eventually leading to higher attrition. It is critical that organizations establish structured career pathways, continuous upskilling opportunities, regular feedback mechanisms, and improved recognition programs to foster motivation… Read More "60% of cybersecurity pros looking to change employers"
