Microsoft fixes Outlook zero-day used by Russian hackers since April 2022
Microsoft has patched an Outlook zero-day vulnerability (CVE-2023-23397) exploited by a hacking group linked to Russia's military intelligence service GRU to…
Kali Linux 2023.1 introduces ‘Purple’ distro for defensive security
Offensive Security has released Kali Linux 2023.1, the first version of 2023 and the project's 10th anniversary, with a new…
US Lawmakers Face Cyberattacks, Potential Physical Harm After DC Health Link Breach
The threat actor who posted the data for sale has claimed credit for multiple other breaches, including one at grocery…
Inside Threat: Developers Leaked 10M Credentials, Passwords in 2022
More than five out of every 1,000 commits to GitHub included a software secret, half again the rate in 2021,…
GitHub makes 2FA mandatory next week for active developers
GitHub will start requiring active developers to enable two-factor authentication (2FA) on their accounts beginning next week, on March 13.…
Chinese hackers use new custom backdoor to evade detection
The Chinese cyber espionage hacking group Mustang Panda was seen deploying a new custom backdoor named 'MQsTTang' in attacks starting…
CISA releases free ‘Decider’ tool to help with MITRE ATT&CK mapping
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has released 'Decider,' an open-source tool that helps defenders and security analysts…
Fastly Launches Managed Security Service to Protect Enterprises From Rising Web Application Attacks
SAN FRANCISCO – March 1, 2023 – Fastly, Inc. (NYSE: FSLY), the world’s fastest global...
Microsoft PowerToys adds ‘Paste as plain text’ and Mouse Jump tools
Microsoft has added two new utilities to the open-source PowerToys toolset to help Windows users paste text without formatting and…
GitHub’s secret scanning alerts now available for all public repos
GitHub has announced that its secret scanning alerts service is now generally available to all public repositories and can be…