Organizations are losing between $94 – $186 billion annually to vulnerable or insecure APIs (Application Programming Interfaces) and automated abuse by bots. That’s according to The Economic Impact of API… Read More »Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually
Google has announced that it’s piloting a new security initiative that automatically blocks sideloading of potentially unsafe Android apps in India, after similar tests in Singapore, Thailand, and Brazil. The… Read More »Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection
Ever heard of a “pig butchering” scam? Or a DDoS attack so big it could melt your brain? This week’s cybersecurity recap has it all – government showdowns, sneaky malware,… Read More »THN Cybersecurity Recap: Top Threats and Trends (Sep 30 – Oct 6)
A critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the execution of arbitrary code on susceptible instances.… Read More »Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications
Cybersecurity researchers have discovered a new botnet malware family called Gorilla (aka GorillaBot) that is a variant of the leaked Mirai botnet source code. Cybersecurity firm NSFOCUS, which identified the… Read More »New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries
The interest in passwordless authentication has increased due to the rise of hybrid work environments and widespread digitization. This has led to a greater need for reliable data security and… Read More »Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless
Europe’s top court has ruled that Meta Platforms must restrict the use of personal data harvested from Facebook for serving targeted ads even when users consent to their information being… Read More »E.U. Court Limits Meta’s Use of Personal Facebook Data for Targeted Ads
Apple has released iOS and iPadOS updates to address two security issues, one of which could have allowed a user’s passwords to be read out aloud by its VoiceOver assistive… Read More »Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability
Microsoft and the U.S. Department of Justice (DoJ) on Thursday announced the seizure of 107 internet domains used by state-sponsored threat actors with ties to Russia to facilitate computer fraud… Read More »U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown
A new high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable malicious actors to execute arbitrary JavaScript code under certain conditions. The flaw,… Read More »WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks