CISA: Attacks exploiting F5 BIG-IP cookies underway
Organizations have been warned by the Cybersecurity and Infrastructure Security Agency about ongoing attacks exploiting unencrypted F5 BIG-IP Local Traffic Manager module-managed persistence cookies to discover other devices within the targeted...
US telcos, agencies sought for more Salt Typhoon hack info
Major U.S. telecommunications firms AT&T, Verizon, and Lumen Technologies have been urged by House Energy and Commerce Committee leaders to provide more information on their response to Chinese state-backed threat operation Salt Typhoon's successful...
Phishing Page Delivered Through a Blob URL, (Mon, Oct 14th)
I receive a lot of spam in my catch-all mailboxes. If most of them are not interesting, some still attract my attention. Especially the one that I'll describe in this diary. The scenario is classic, an important document is pending delivery...
Wireshark release 4.4.1 fixes 2 vulnerabilities and 27 bugs. One of these bugfixes is for the missing IP address plugin on Windows, see " Wireshark 4.4's IP Address Functions".
Companies are putting "AI" in just about all of their products, which opens up new security holes. LLM SecOps and ML SecOps are becoming must-have skills.
Marriott & Starwood Face $52M Settlement After Security Breaches
The hotel giant will be held to higher security standards in a series of proposed requirements, including implementing a new annually reviewed security program.