#security
Security stories
- posts
- 3
- snippets
- 1
- stories
- 16
- videos
- 18
- tools
- 1
-
atlassian.com ·
From fake interviews to malicious repositories: Disrupting Contagious Interview - Inside Atlassian (opens in a new tab)Software developers and IT professionals are increasingly being targeted through fraudulent recruitment processes that exploit their trust in established development platforms. Candidates are invited to complete seemingly legitimate coding assessments hosted in publicly accessible repositories on services such as Bitbucket, GitHub, and GitLab.
-
thehackernews.com ·
20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack (opens in a new tab)20 npm packages with 2B weekly downloads compromised after maintainer phishing led to crypto-stealing malware.
-
bleepingcomputer.com ·
Malicious VSCode extensions with millions of installs discovered (opens in a new tab) -
thehackernews.com ·
Hackers Breach Okta's GitHub Repositories, Steal Source Code (opens in a new tab)Okta recently discovered that some of its source code repositories on GitHub had been compromised earlier in the month.
-
techtarget.com ·
What is a Nonce? - Cryptographic Nonce from SearchSecurity (opens in a new tab)Nonce is a random or semi-random number that is generated for a specific use. See the full cryptographic nonce definition and more today.
-
openssf.org ·
Introducing the Allstar GitHub App - Open Source Security Foundation (opens in a new tab) -
cheatsheetseries.owasp.org ·
Mass Assignment - OWASP Cheat Sheet Series (opens in a new tab)Website with the collection of all the cheat sheets of the project.
-
thehackernews.com ·
Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw (opens in a new tab)Azure users are being urged by Microsoft to update PowerShell in order to patch a critical RCE flaw.
-
thehackernews.com ·
Zero-Click Wormable RCE Vulnerability Reported in Microsoft Teams (opens in a new tab) -
joonasw.net ·
ASP.NET Core Data Protection with Azure Key Vault and Azure Storage - Joonas W's blog (opens in a new tab)How to configure and use the combination of Azure Storage and Azure Key Vault for data protection in ASP.NET Core with the new Azure integration packages
-
androidcentral.com ·
It's time to stop using SMS for two-factor authentication and it's time for services to stop offering it | Android Central (opens in a new tab)Not all 2FA is equal. Using SMS to get a code might not be better than nothing after all.
-
freecodecamp.org ·
10 Tools You Should Know As A Cybersecurity Engineer (opens in a new tab)From scanning to post-exploitation, there are numerous tools that help you accomplish your goal as a penetration tester. Here are ten tools you must know if you are into cybersecurity.
-
dzone.com ·
Top 10 API Security Threats Every API Team Should Know - DZone Security (opens in a new tab)Learn what are the most important API security threats engineering leaders should be aware of and steps you can take to prevent them
-
zdnet.com ·
A crypto-mining botnet has been hijacking MSSQL servers for almost two years | ZDNet (opens in a new tab)Vollgar botnet launches brute-force attacks against MSSQL databases to take over servers and install Monero and Vollar cryptocurrency miners.
-
lifehacker.com ·
Why You Should Use Windows Defender's Ransomware Prevention (opens in a new tab)A crucial security feature in Windows Defender comes disabled by default: Ransomware Protection...
-
codeshare.co.uk ·
SHA 256 and SHA 512 hash examples (opens in a new tab)This post contains examples of how to generate a SHA 256 and SHA 512 hash key with the examples in C# and VB.NET. This solution matches the expected result for Ingenico's implementation for their payment gateway.