Tag: cybersecurity
-
Missed CAPTCHA and CloudFront Fails
Hello everyone, I want to share how easy it is to exploit vulnerabilities on a website and how Ericsson ignored my report. Here’s what happened: Applying for a Position at Ericsson When I applied for a job at Ericsson, I discovered their “Join Talent Network” This page allows anyone to enter their First Name, Last…
-
State of Education in Secure Software Development
WASHINGTON, July 16, 2024 (GLOBE NEWSWIRE) — Linux Foundation Research and the Open Source Security Foundation (OpenSSF) are pleased to release a new report titled “Secure Software Development Education 2024 Survey: Understanding Current Needs.” Based on a survey of nearly 400 software development professionals, the analysis explores the current state of secure software development and…
-
10 Billion Passwords Leaked
The largest password compilation with nearly ten billion unique passwords was leaked on a popular hacking forum. The Cybernews research team believes the leak poses severe dangers to users prone to reusing passwords. The king is dead. Long live the king. Cybernews researchers discovered what appears to be the largest password compilation with a staggering…
-
CISA to Re-do C/C++ Projects with Rust
So, so many lines of memory-unsafe routines in crucial open source, and unsafe dependencies. The US government’s Cybersecurity and Infrastructure Security Agency (CISA) has analyzed 172 critical open source projects and found that more than half contain code written in languages like C and C++ that are not naturally memory safe. What’s more, projects written…
-
Best Practices for Secure Linux Kernel Updates
Keeping your Linux systems secure and up to date is a crucial part of maintaining a robust IT infrastructure. The Linux kernel is the core component of the operating system, responsible for managing system resources and facilitating communication between hardware and software. Therefore, regular Linux kernel updates are essential to patch vulnerabilities, enhance performance, and…
-
Proton Pass Desktop App Released for Linux
Proton, the Swiss-based privacy company best known for its VPN and e-mail services, has announced the release of Proton Pass for Linux and macOS. The new desktop apps mean Proton’s open-source and end-to-end encrypted password manager now supports all major desktop operating systems, as well as Android and iOS. Proton Pass web extensions are available…
