Source
PortSwigger
Pwn2Own Miami: Hackers earn $400,000 by cracking ICS platforms
Industrial control insecurity laid bare during competition
Vulnerability in AWS Log4Shell hot patch allowed full host takeover
Critical security issues found in quick fix
Hack Me, I’m Famous: Bug bounty hackathon nets security researcher €10,000 overnight
European event saw 40 researchers team up to find bugs
NIST revamps aging enterprise patch management guidance
US agency highlights ‘divide’ between security teams and their colleagues about the value of patching
Java encryption implementation error made it trivial to forge credentials
Bundled math in code issue created security trap
UK government employees receive ‘billions’ of malicious emails per year – report
Phishing, malware, and spam are popular techniques deployed by attackers
Utah Consumer Privacy Act: New legislation adds another wrinkle to the US legal landscape
Soon to be enacted law provides further governance for citizens’ data
XSS vulnerability in open source tool PrivateBin patched
Flaw allowed malicious JavaScript to be embedded in an SVG file
Tearing down red flags: Women in CyberSecurity’s Lynn Dohm on tackling the high exit rate of female infosec pros
Infosec leader on why training, mutual support, and career opportunities are needed to keep women in their roles