Russia Alcohol Websites hit by DDoS

Russia Alcohol Websites hit by DDoS

It’s been reported that websites belonging to Russian alcohol companies were disrupted by a DDoS attack between May 2nd & 3rd by Ukrainian hacktivists which reportedly disrupted alcohol shipments. As…
NIST Publication on Supply Chain Risk Management

NIST Publication on Supply Chain Risk Management

The National Institute of Standards and Technology (NIST) has updated its cybersecurity guidance for addressing software supply-chain risk, offering tailored sets of suggested security controls for various stakeholders. Software supply-chain…
Critical bug in BIG-IP F5 Patched

Critical bug in BIG-IP F5 Patched

F5 has disclosed a critical vulnerability in its BIG-IP product.The flaw is in the iControl REST component of BIG-IP. This vulnerability may allow an unauthenticated attacker with network access to…
Curious Gorge too Curious on Russia

Curious Gorge too Curious on Russia

Google Threat Analysis Group has reported that an APT group linked to China’s People’s Liberation Army Strategic Support Force (PLA SSF), tracked as Curious Gorge, is targeting Russian government agencies.…
Path Traversal flaw in OWASP ESPI

Path Traversal flaw in OWASP ESPI

The Open Web Application Security Project (OWASP) has fixed a critical vulnerability in its Enterprise Security API (ESAPI) whose exploitation could have allowed threat actors to run path traversal attacks.…