הניתוחים שלנו
מה זה אומר עבור השרתים שלכם
חדשות האבטחה החשובות, בהסבר הצוות שלנו — עם הצעדים המעשיים שיש לנקוט.
חדשות האבטחה החשובות, בהסבר הצוות שלנו — עם הצעדים המעשיים שיש לנקוט.
נאספים כל שעתיים מפרסומים מקצועיים — כל קישור מוביל למאמר המקורי.
עדיין אין חדשות בשפתכם — הנה הסיקור שלנו באנגלית:
In a sign that cybersecurity researchers continue to be under the radar of malicious actors, a proof-of-concept (PoC) has been discovered on GitHub, concealing…
Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study has revealed.This includes repositories from org…
Hackers are impersonating cybersecurity researchers on Twitter and GitHub to publish fake proof-of-concept exploits for zero-day vulnerabilities that infect Wi…
At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositori…
GitHub has updated its SSH keys after accidentally publishing the private part to the world. Whoops.
New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub Codespaces to deliver malware to victim systems.GitHub Cod…
golang-github-graylog2-gelf-2.0.0-5.20201111git1550ee6.fc37 was not in F37 because was override with golang-github- graylog2-gelf-2.0.0-4.20190627git7ebf4f5.fc…
The subgroup of an Iranian nation-state group known asNemesis Kittenhas been attributed as behind a previously undocumented custom malware dubbed Drokbk that u…
Dropbox has revealed details of a phishing attack to which it fell victim. In the attack, a threat actor was able to steal code from the company after gatherin…
Cloud-based code hosting platform GitHub has announced that it will now start sending Dependabot alerts for vulnerable GitHub Actions to help developers fix se…
What is GRR? This incident response framework is an open source tool used for live…GRR Rapid Response Github Tool on Latest Hacking News
## moby-engine https://github.com/moby/moby/releases/tag/v20.10.17 Includes updates to bundled libraries that fix CVEs. ## golang-github-docker-libnetwork Bump…
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
## moby-engine https://github.com/moby/moby/releases/tag/v20.10.17 Includes updates to bundled libraries that fix CVEs. ## golang-github-docker-libnetwork Bump…
GitHub Enterprise Server, the self-hosted version of the code shack's platform, has hit version 3.5. The company said there are over 60 new features, including…
Earlier this month, GitHub suffered a massive security breach affecting numerous users’ accounts. The breach…GitHub Shares Details About The Stolen OAuth User …
GitHub has announced that their Advisory Database for security data is now open to contributions from experts. The full contents of the Advisory Database have …
GitHub has now announced a secure login feature for its users. As announced, users can…GitHub Introduces 2FA On Its Mobile Apps on Latest Hacking News
Popular e-commerce platform Shopify had a simple yet serious vulnerability that could have devastating results.…Critical Shopify Vulnerability Exposed GitHub A…
GitHub has recently patched a vulnerability that potentially threatened all user accounts. Though, it actually…GitHub Vulnerability Could Expose Users' Session…
Numerous malicious npm packages surfaced online once again. This time, four npm packages appeared in a repository that published userMalicious npm Packages Pub…
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
