Third Party Risk Assessment

Third Party Risk Assessment
GitHub Codespaces Attack Vector Malware Strains
Third Party Risk Assessment

GitHub Codespaces could become a vector for malware strains

By
January 26, 2023

The GitHub Codespaces feature has shown signs that it could…

Cacti Network Monitoring Critical Flaw Vulnerability Abuse Hackers Malware
Third Party Risk Assessment

Cacti critical flaw enables hackers to deploy malware

By
January 25, 2023

Researchers discovered that the Cacti critical flaw could allow threat…

Scattered Spider Threat Group BYOVD Cyberattack Bypass Security
Third Party Risk Assessment

Scattered Spider tried the BYOVD attack to bypass security

By
January 24, 2023

The financially motivated threat group called Scattered Spider has attempted…

Threat Actors Vulnerability Abuse Critical Flaw Control Web Panel CWP Cent OS
Third Party Risk Assessment

Threat actors abuse the critical flaw on the Control Web Panel

By
January 24, 2023

A new incident has found hackers exploiting a critical vulnerability…

Google Home Spying Tool Flaw Vulnerability Exploit Critical Bug Patch
Third Party Risk Assessment

Google Home could become a spying tool due to a flaw

By
January 12, 2023

Recent research revealed that a critical bug in Google Home…

ZyXEL Routers Backdoor Flaw Exploit Vulnerability
Third Party Risk Assessment

ZyXEL routers showed signs of a backdoor credential

By
January 11, 2023

A researcher found a backdoor credential within ZyXEL routers. Based…

Authentication Bypass Flaw Vulnerability Discovered Ghost CMS
Third Party Risk Assessment

An authentication bypass flaw is discovered on Ghost CMS

By
January 5, 2023

The Ghost CMS newsletter subscription system could enable external users…

Malicious Code Python Package Data Stealer Developers
Third Party Risk Assessment

Malicious Python package steals data from developers

By
January 4, 2023

Hackers have developed a compromised Python package on PyPI dubbed…

Open-Source Repositories Phishing Malicious Packages Third Party Risk Cyber Threat PyPi NuGet NPM
Third Party Risk Assessment

Open-source repositories overflow with phishing packages

By
December 29, 2022

Open-source repositories such as PyPi, NuGet, and NPM were flooded…

Flaw Vulnerability IoT Devices Zerobot Botnet Malware TOTOLINK Hikvision Zyxel F5
Third Party Risk Assessment

Flaws within IoT devices exploited by the Zerobot botnet

By
December 22, 2022

The Zerobot botnet is the latest inclusion to the long…