-
Two account compromise flaws fixed in Strapi headless CMS
PRIVACY PRIVACY Users of Strapi, a popular headless content management system written entirely in JavaScript and focused on API development, should update their installations as soon as possible to fix two vulnerabilities that could lead to administrative accounts being compromised. According to researchers with the Synopsys Cybersecurity Research Center (CyRC), the flaws allow a user…
-
QuSecure launches end-to-end post-quantum cybersecurity solution
PRIVACY PRIVACY Post-quantum cryptography company QuSecure has announced its debut with the launch of a new post-quantum cybersecurity solution, QuProtect. The firm claimed that QuProtect is the industry’s first end-to-end quantum software-based platform designed to protect encrypted communications and data using a quantum secure channel. The solution addresses present classical attacks and future quantum computing threats…
-
Hackers are finding it too easy to achieve their initial access, warn agencies
PRIVACY PRIVACY It should be hard for malicious hackers to break into systems, but all too often it isn’t. Read more in my article on the Tripwire State of Security blog. Read More
-
Websites that Collect Your Data as You Type
PRIVACY PRIVACY A surprising number of websites include JavaScript keyloggers that collect everything you type as you type it, not just when you submit a form. Researchers from KU Leuven, Radboud University, and University of Lausanne crawled and analyzed the top 100,000 websites, looking at scenarios in which a user is visiting a site while…
-
How To Do A Virus Scan
PRIVACY PRIVACY How to Check for Viruses Whether you think you might have a virus on your computer or devices, or just want to keep them running smoothly, it’s easy to do a virus scan. How to check for viruses depends on the software and device you have, so we’ll go through everything you need…
-
Bad Bots Swarm the Internet in Record Numbers in 2021
PRIVACY PRIVACY Account takeover attacks surge as a result Read More
-
WannaCry 5 years on: Still a top threat
PRIVACY PRIVACY Who doesn’t love an anniversary and the opportunity to reminisce about “where we were” when an historical event happened? Such is the case over the last several days when it comes to remembering WannaCry, the ransomware that infected thousands of computers five years ago and cost companies all over the world billions of…
-
Uber CISO’s trial underscores the importance of truth, transparency, and trust
PRIVACY PRIVACY Truth, transparency and trust are the three T’s that all CISOs and CSOs should embrace as they march through their daily grind of keeping their enterprise and the data safe and secure. Failure to adhere to the three T’s can have serious consequences. Case in point: A federal judge recently ordered Uber Technologies…
-
How to choose a certificate management tool
PRIVACY PRIVACY Many years ago, Madonna sang about sharing her secrets with us. While the IT version may not be as entertaining as what was discussed in that song, there are still important reasons to understand your corporate encryption secrets and how they are provisioned, managed and deployed. The tools to do this go by…
-
Half of IT Leaders Store Passwords in Shared Docs
PRIVACY PRIVACY Many aren’t following the advice of their own training programs Read More