Topics
security-news
New Technique to Trick Developers Detected in an Open Source Supply Chain Attack
Cybercriminals were discovered cleverly manipulating GitHub's search functionality and using meticulously crafted repositories to distribute malware.
CVE-2024-3094: Critical RCE Vulnerability in XZ Utils
A critical supply chain compromise has been detected in XZ Utils versions 5.6.0 and 5.6.1, which may lead to remote code execution (RCE) via SSH authentication on affected distributions.
Vulnerability Management: Beyond Patching
An article explores the evolving landscape of vulnerability management, delving deeper than mere patching — from NIST framework core functions to PCI DSS and ISO 27001/27002 compliance changes and the role of Zero Trust.