Scroll down for the latest penetration testing news and information.
Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.
Attackers are engaging in extensive post-compromise activity and organizations need to place a greater focus on this aspect of their cybersecurity
CVE-2024-38173 is a medium severity RCE flaw in Microsoft Outlook, similar to CVE-2024-30103
Sophos said the campaign aimed to maintain prolonged network access for espionage purposes
This occurs when a private package fetches a similar public one, leading to exploit due to misconfigurations in package managers
The flaws, identified by KTrust, enable attackers to bypass rate limits and brute force protection mechanisms
Google revealed it paid $10m in bug bounty payments to more than 600 researchers in 2023, with the highest single payment being £113,337
