Twitter's Source Code Leak on GitHub a Potential Cyber Nightmare

Indicators point to Twitter's source code being publicly available for around 3 months, offering a developer security object lesson for businesses.

https://www.darkreading.com/attacks-brea...-nightmare

Clop Keeps Racking Up Ransomware Victims With GoAnywhere Flaw

After several weeks and more than 130 ransomware victims, GoAnywhere parent company Forta issues a statement.

https://www.darkreading.com/attacks-brea...here-flaw-

The View from the Other Side: A Security Analyst's Perspective on Bug Bounty Triage




https://www.hackerone.com/hackerone-comm...nty-triage

A Review Of Helm And Kubernetes For Your DevOps Pipeline

Helm and Kubernetes products can have an immense impact your DevOps programming pipeline. Containers are…

A Review Of Helm And Kubernetes For Your DevOps Pipeline on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Study Reveals Inaudible Sound Attack Threatens Voice Assistants

A recent study reveals how attackers can trigger vulnerabilities in voice assistants for malicious purposes.…

Study Reveals Inaudible Sound Attack Threatens Voice Assistants on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

New IcedID variants shift from bank fraud to malware delivery


New IcedID variants have been found without the usual online banking fraud functionality and instead focus on installing further malware on compromised systems. [...]


https://www.bleepingcomputer.com/news/se...-delivery/

Apple fixes recently disclosed WebKit zero-day on older iPhones


Apple has released security updates to backport patches released last month, addressing an actively exploited zero-day bug for older iPhones and iPads. [...]


https://www.bleepingcomputer.com/news/ap...r-iphones/

Exchange Online to block emails from vulnerable on-prem servers

Microsoft is introducing a new Exchange Online security feature that will automatically start throttling and eventually block all emails sent from "persistently vulnerable Exchange servers" 90 days after the admins are pinged to secure them.  [...]


https://www.bleepingcomputer.com/news/se...m-servers/

Introducing HackerOne Assets

Understanding where the critical flaws lie within your organization's attack surface is critical—but complicated. After all, your attack surface includes your infrastructure, network, software, applications, devices, and the extended supply chain. But it doesn’t stop there. Digital transformation, cloud adoption, the shift to remote work, mergers and acquisitions (M&A), and shadow IT further muddy the waters for today’s security leaders.


https://www.hackerone.com/vulnerability-...one-assets

Meeting the Mediation Team at H1-702




https://www.hackerone.com/hackerone-comm...eam-h1-702