GitHub Paid Out Over $4 Million via Bug Bounty Program

The code hosting platform GitHub has paid out more than $4 million since the launch of its bug bounty program 10 years ago.

The post GitHub Paid Out Over $4 Million via Bug Bounty Program appeared first on SecurityWeek.

SecurityWeek – ​Read More

6 Best VPNs for Australia in 2024

What’s the best VPN to use in Australia? Discover the pricing, features, pros and cons of our recommended VPNs for Australia.

Security | TechRepublic – ​Read More

When Vendors Overstep – Identifying the AI You Don’t Need

AI models are nothing without vast data sets to train them and vendors will be increasingly tempted to harvest as much data as they can and answer any questions later.

The post When Vendors Overstep – Identifying the AI You Don’t Need appeared first on SecurityWeek.

SecurityWeek – ​Read More

New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

Cybersecurity researchers have disclosed details of an ongoing phishing campaign that leverages recruiting- and job-themed lures to deliver a Windows-based backdoor named WARMCOOKIE.
“WARMCOOKIE appears to be an initial backdoor tool used to scout out victim networks and deploy additional payloads,” Elastic Security Labs researcher Daniel Stepanic said in a new analysis. “Each sample is compiled

The Hacker News – ​Read More

China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

State-sponsored threat actors backed by China gained access to 20,000 Fortinet FortiGate systems worldwide by exploiting a known critical security flaw between 2022 and 2023, indicating that the operation had a broader impact than previously known.
“The state actor behind this campaign was already aware of this vulnerability in FortiGate systems at least two months before Fortinet disclosed the

The Hacker News – ​Read More

Facebook, Meta, Apple, Amazon Most Impersonated in Phishing Scams

Feeling phished? Don’t be a victim! Learn from Mailsuite’s research which popular brands scammers impersonate the most (including surprising ones!) and how to identify these cunning attacks.

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

RansomHub Brings Scattered Spider Into Its RaaS Fold

The threat group behind breaches at Caesars and MGM moves its business over to a different ransomware-as-a-service operation.

darkreading – ​Read More

Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities

Google and Mozilla have released patches for 21 and 15 vulnerabilities in Chrome and Firefox, respectively.

The post Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

SecurityWeek – ​Read More

UK Trails Behind Europe in Technical Skills Proficiency, Coursera Report Finds

The U.K. is the 25th most technically proficient country in Europe, with Switzerland, Germany and the Netherlands taking the top three places.

Security | TechRepublic – ​Read More

Ransomware Group Exploits PHP Vulnerability Days After Disclosure

The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure.

The post Ransomware Group Exploits PHP Vulnerability Days After Disclosure appeared first on SecurityWeek.

SecurityWeek – ​Read More