Szolgáltatóknak

[This is a Guest Diary by Alex Rodriguez, an ISC intern as part of the SANS.edu BACS program]

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Dropping the ball on chemical security has precipitated "a national security gap too great to ignore," CISA warns.

Anyscale has dismissed the vulnerabilities as non-issues, according to researchers who reported the bugs to the company.

Novel products aimed at strengthening application security among software developers have been launched by Veracode, according to SiliconAngle.

Vulnerable SSH servers could be compromised to secure private RSA host keys through a new passive attack method that involves the observation of computational faults during the signing process that exposes the private keys, The Hacker News reports.

SecurityWeek reports that threat actors could leverage critical vulnerabilities impacting open-source file-sharing software ownCloud to facilitate sensitive data exposure and authentication and validation compromise.

Decentralized exchange protocol KyberSwap has disclosed losing nearly $54.7 million worth of cryptocurrency following a cyberattack on Nov. 22, which involved a complex exploitative swap attack chain aimed at users' funds, reports The Record, a news site by cybersecurity firm Recorded Future.

TechRadar reports that Bahrain's flag carrier Gulf Air has disclosed being impacted by a data breach on Nov. 24, which may resulted in the exposure of certain email and client database information.

Iranian hacking group Cyber Av3ngers has deployed a cyberattack against the Municipal Water Authority of Aliquippa in Pennsylvania during the weekend, according to KDKA-TV.