5
New Today
 
Russian Information Security Company Positive Technologies also Fell Under th...
 
Barracuda Networks Recommends Customers to Replace Hacked ESGs despite Patches
 
CrowdStrike Introduces Charlotte AI, the World’s First Cyber Security A...
 
New White Phoenix Tool Helps Recover Files Partially Encrypted by Ransomware
 
Google Authenticator Will Have End-to-End Encryption
Top Nav
Posts Tagged ‘bug bounty’
Sort
         
 
Read More
Student Found Bug in Cloudflare Email Routing Closed Beta
Danish Skive College student Albert Pedersen managed to break into the closed beta of Cloudflare Email Routing (without an invitation) and discovered a bug that attackers could use to hijack and steal someone else’s email. Pedersen ended up getting $6,000 from Cloudflare through a bug bounty program.

Let me remind you that we wrote that Cloudflare Coped With The Most Powerful DDoS Attack to Date, and also that Developers Can’t Fix a Serious Vulnerability in OpenSSL.

Albert Pedersen

In an article published earlier this week, Pedersen revealed that he alerted Cloudflare to the problem via HackerOne as early as December 7, 2021. According to [...]

 
Read More
RCE vulnerability fixed in Sophos Firewall
Sophos developers have warned that the RCE vulnerability associated with Sophos Firewall is already being actively used in attacks.

The latest vulnerability has the identifier CVE-2022-1040 and is rated as critical on the CVSS scale (9.8 points out of 10 possible).

The bug reportedly allows remote attackers to bypass authentication through the firewall’s user portal or web admin and then execute arbitrary code. The vulnerability was discovered by an anonymous researcher who reported it through the official bug bounty program and stated that the issue affects Sophos Firewall 18.5 MR3 (18.5.3) and earlier.

So far, little is known about attacks that exploit this [...]


 
Read More
U.S. Authorities Declared that Kaspersky Lab Products Endanger the US National Security
The US Federal Communications Commission (FCC) has listed the products of Kaspersky Lab, as well as the Chinese China Telecom (Americas) Corp and China Mobile International USA as those that can endanger the US national security.

Companies on this list are prohibited from purchasing telecommunications equipment and services, parts and components from US companies without specific government approval, and are not eligible for FCC funding. Let me remind you that such giants as Huawei and ZTE have already been included in this list.

According to the US authorities, the products of the banned companies pose a threat to US national security. The ban was imposed under a law that [...]

Norton Antivirus
8.4
Bitdefender
8.5
McAfee Antivirus
8.3
Kaspersky Internet Security
7.8
Avira Antivirus
7.1
BullGuard
7.8
Compare
Go