Heroku accepts that it suffered a data breach impacting its internal customer da...

dotCMS reported a critical RCE vulnerability tracked as CVE-2022-26352, derives ...

Mitsubishi Electric has been falsifying its quality assurance (QA) testing proce...

GitHub

OAuth

Tokens

Heroku discloses data breach at its database after forced password reset

Heroku accepts that it suffered a data breach impacting its internal customer database after stolen GitHub OAuth tokens were exploited that couldn't be......

06-May-2022

5 min read

CMS

RCE

dotCMS reported a pre-authenticated RCE vulnerability

dotCMS reported a critical RCE vulnerability tracked as CVE-2022-26352, derives from a directory traversal attack allowing to execute arbitrary commands......

05-May-2022

2 min read

QA

Transformer

Mitsubishi caught cheating with Quality Assurance Tests for decades

Mitsubishi Electric has been falsifying its quality assurance (QA) testing procedures, including safety test reports for transformers, following the disclosure of......

04-May-2022

4 min read

Energy

Email Security

Riviera Utilities customer information exposed after email hack

Riviera Utilities suffered a data leak following the hack at their employee email accounts led to the exposure of customers' details...

04-May-2022

2 min read

Cyberattack

Car rental

Sixt car rental hit by a weekend cyberattack led to business disruptions

Car rental giant Sixt was hit by a weekend cyberattack causing business disruptions at customer care centers and select branches...

02-May-2022

3 min read

Rebrand

Ransomware

REvil

REvil ransomware resurrects in public without getting rebranded

REvil ransomware operations resurfaced with new malware configurations after shut down without evading detection by getting rebranded…

02-May-2022

4 min read

Ransomware

Russia

Ukraine encountered 237 Russian cyberattacks as documented by Microsoft

Russia-aligned adversaries launched 237 cyberattacks against Ukraine ever since the invasion...

02-May-2022

4 min read

Linux

OpenSSF

200+ malicious npm & PyPI packages found by Package Analysis tool

OpenSSF, a Linux Foundation-backed initiative ha,s released its prototype version of the 'Package Analysis' tool to catch and counter malicious attacks on open source registries......

01-May-2022

3 min read