Month: January 2022
7 posts
PwnKit Local Privilege Escalation Bug Plagues Linux Distributions
1/27/2022 23:23 GMT An argument-parsing bug in the pkexec utility from the PolKit package allows easy-to-exploit local privilege…
How To Become a Penetration Tester: A DIY Guide
Pedro Sosa, Attack Team (NCAT) Manager at Novacoast has compiled this Getting Started guide to help newcomers find…
Open Source Developers Sabotage Projects Downloaded By Millions
What can devOps and cybersecurity professionals learn from the latest software supply chain disaster?
Microsoft Critical Wormable RCE and Six Zero-Days Highlight January Patch Tuesday
The January 2022 Patch Tuesday is a big one, but shouldn't be postponed as it contains a patch for a critical wormable RCE vulnerability in the HTTP protocol stack.
University Researchers Pit Top 18 EDR Products Against Real-World Attacks
As the industry becomes more committed to relying on the latest class of endpoint protection products, one has…
Log4j New Year Wrap-Up
One month into the Log4j vulnerability, we take a look at the 3 CVEs and their fixes, known exploits being observed in the wild, and a way forward in dealing with the ubiquitous and targeted Java library.
The Five Biggest Cybersecurity Challenges in 2022
At the outset of the new year we take a look at the biggest challenges ahead.