Security News > 2024 > November

Debunking myths about open-source security
2024-11-20 05:30

In this Help Net Security interview, Stephanie Domas, CISO at Canonical, discusses common misconceptions about open-source security and how the community can work to dispel them. She explains how...

Safeguarding the DNS through registries
2024-11-20 05:00

The integrity of our online ecosystem heavily relies on domain registries, which serve as the foundation for secure and trusted digital experiences. However, threats like Domain Name System (DNS)...

Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities
2024-11-20 04:37

Apple has released security updates for iOS, iPadOS, macOS, visionOS, and its Safari web browser to address two zero-day flaws that have come under active exploitation in the wild. The flaws are...

Cybersecurity jobs available right now: November 20, 2024
2024-11-20 04:30

Application Security Engineer ENOC | UAE | On-site – View job details As an Application Security Engineer, you will establish and maintain DLP policies to prevent unauthorized access,...

Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation
2024-11-20 04:24

Oracle is warning that a high-severity security flaw impacting the Agile Product Lifecycle Management (PLM) Framework has been exploited in the wild. The vulnerability, tracked as CVE-2024-21287...

Overreliance on GenAI to develop software compromises security
2024-11-20 04:00

GenAI is quickly changing the software development process by automating tasks that once took developers hours, if not days, to complete, bolstering efficiency and productivity, according to Legit...

Healthcare org Equinox notifies 21K patients and staff of data theft
2024-11-20 00:30

Ransomware scum LockBit claims it did the dirty deed Equinox, a New York State health and human services organization, has begun notifying over 21 thousand clients and staff that cyber criminals...

China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer
2024-11-19 23:02

No word on when or if the issue will be fixed Chinese government-linked snoops are exploiting a zero-day bug in Fortinet's Windows VPN client to steal credentials and other information, according...

Russian suspected Phobos ransomware admin extradited to US over $16M extortion
2024-11-19 21:55

This malware is FREE for EVERY crook ($300 decryption keys sold separately) A Russian citizen has been extradited from South Korea to the United States to face charges related to his alleged role...

Apple fixes two zero-days used in attacks on Intel-based Macs
2024-11-19 21:52

Apple released emergency security updates to fix two zero-day vulnerabilities that were exploited in attacks on Intel-based Mac systems. [...]