Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Polyfill.js is a Javascript library that helps old browsers run new modern features which these old browsers do not support natively. The library is popular among developers for helping them offer consistent user experience regardless of the browser environment the user is using. In February 2024, a Chinese company bought the domain polyfill.io and the Github account associated with it. Since then, they’ve been serving malware via cdn.polyfill.io as pointed by the team at Sansec.

It’s an API talking to the API world we’re living in. As per Postman, 500 million new APIs are expected to be created by 2025. APIs are a lifesaver when it comes to automation or integration. But when it comes to the security of these APIs, things can get a little tricky. OWASP API Top 10 gives insights on top vulnerabilities exploited in APIs.

Sun Tzu once said, “If you know the enemy and know yourself, your victory will not stand in doubt.” Yet, despite global cybersecurity investment crossing $188 Billion and 93% of companies feeling cyber-secure, the data breaches in the US alone were up by 78% in 2023.

CVE-2024-3094 is a critical backdoor vulnerability found in the XZ Utils open-source library. The vulnerability was caused by a malicious code injected into the library by one of the maintainers. The vulnerability allows remote attackers to execute any desired code on systems with exposed SSH packages.

Privileged Access Management (PAM) is a comprehensive framework of policies, strategies, and technologies designed to regulate, oversee, and fortify access to critical resources for human and service accounts.

A stored XSS vulnerability was discovered in BlogHub, a plugin in the CMS October. This article explores the vulnerability, its impact, and current status in detail.

A company that deals with financial data in any form would be aware of PCI-DSS or Payment Card Industry Data Security Standards. PCI-DSS was created specifically to help companies maintain security measures for companies that deal with cardholder information.

Today’s cybersecurity landscape comes with risks such as improper implementation of security and control measures. This can critically affect your company’s revenue and result in disastrous data breaches, theft, or manipulation.

VikRentCar is a popular car rental management system that is also available as a WordPress plugin. The plugin provides a hassle-free and reliable rent reservation system for cars, scooters, motorbikes, boats, and any other vehicles.

The Federal Trade Commission or FTC, established in 1914, was put forth by then-president Woodrow Wilson to protect consumers, investors, and businesses from anti-competition or industry monopoly. Essentially this meant promoting competition and providing more opportunities for others to enter the market sector.