Google Cloud Build Flaw Enables Privilege Escalation, Code Tampering
Google's fix to the Bad.Build flaw only partially addresses the issue, say security researchers who discovered it.
Cybersecurity firm Sophos impersonated by new SophosEncrypt ransomware
Cybersecurity vendor Sophos is being impersonated by a new ransomware-as-a-service called SophosEncrypt, with the threat actors using the company name…
New critical Citrix ADC and Gateway flaw exploited as zero-day
Citrix today is alerting customers of a critical-severity vulnerability (CVE-2023-3519) in NetScaler ADC and NetScaler Gateway that already has exploits…
Manchin refuses to rule out third party presidential campaign, says ‘if I get in a race, I’m going to win’
West Virginia Sen. Joe Manchin on Monday defended his flirtation with a third-party presidential campaign, telling voters at a No…
Takeaways from new campaign finance reports
The first full financial look at the 2024 presidential race came into focus over the weekend as candidates filed campaign…
Russia flies surveillance flight over US base in Syria, official says
A Russian surveillance aircraft flew above a US base in Syria for an "extended period of time" on Friday morning…
Pence lags behind GOP rivals in second-quarter fundraising
Former Vice President Mike Pence raised less than $1.2 million for his presidential campaign during the second fundraising quarter that…
SBOMs Still More Mandate Than Security
A software bills of materials standard gets an update, but the driver is compliance rather than security.
Spotify reportedly makes users’ private playlists public
In what is shaping up to be a widespread privacy controversy, Spotify has come under scrutiny following allegations by users…
White House Fills in Details Of National Cybersecurity Strategy
While the plan may convey the right kind of urgency, it lacks both funding and bipartisan support, industry professionals say.