#vulnerability-disclosure

[ follow ]
cybersecurity
ITPro
4 days ago
Information security

Dell hacker claims they had access to systems for nearly three weeks

The threat actor behind the recent Dell data breach accessed internal systems for weeks prior to detection by exploiting partner account registration flaws. [ more ]
TechCrunch
2 months ago
Privacy professionals

A bug in an Irish government website that exposed COVID-19 vaccination records took two years to publicly disclose | TechCrunch

Irish government fixed a vulnerability in its national COVID-19 vaccination portal two years ago
Security researcher Aaron Costello discovered the vulnerability in December 2021 [ more ]
CyberScoop
3 months ago
Information security

White House releases report on securing open-source software

The White House is making progress in securing open-source software through its Open-Source Software Security Initiative (OS3I).
Open-source software is ubiquitous and used by various organizations, making it crucial to ensure its security. [ more ]
morecybersecurity
Theregister
2 months ago
Information security

JetBrains fingers Rapid7 for customer ransomware attacks

JetBrains defends against Rapid7's claims of silent patching by emphasizing responsible vulnerability disclosure.
JetBrains criticizes Rapid7 for releasing full details and exploit code of vulnerabilities just hours after patches, resulting in customer harm. [ more ]
Theregister
2 months ago
Information security

Rapid7 flames JetBrains over vulnerability disclosure

Rapid7 criticizes JetBrains for silent patching
Importance of transparency in vulnerability disclosure [ more ]
ComputerWeekly.com
3 months ago
Privacy professionals

MoD ethical hacking programme expands after initial success | Computer Weekly

The Ministry of Defence has expanded its defensive security initiative with HackerOne to include key suppliers.
The MoD's partnership with ethical hackers aims to identify and fix vulnerabilities in its systems to enhance cyber security. [ more ]
[ Load more ]