radarappsecurity.com Cross Site Scripting vulnerability OBB-3902574

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

From Megabits to Terabits: Gcore Radar Warns of a New Era of DDoS Attacks

As we enter 2024, Gcore has released its latest Gcore Radar report, a twice-annual publication in which the company releases internal analytics to track DDoS attacks. Gcore's broad, internationally distributed network of scrubbing centers allows them to follow attack trends over time. Read on to...

Wallarm Named a Leader in GigaOm Radar for API Security

I am thrilled to share that Wallarm, has been named a leader in the GigaOm Radar for API Security! We would like to share insights from the recent GigaOm 2023 API Security Radar report, particularly shining a spotlight on our Advanced API Security solution. The growing importance of APIs and API...

Wiz recognized by Frost and Sullivan as a leading Cloud Native Application Protection Platform for 2023

Learn why Frost & Sullivan's Frost Radar Report describes the Wiz platform "as one of the market’s most powerful cloud infrastructure security platforms."...

Imperva Customers are Protected Against the Latest F5 BIG-IP Vulnerability

Imperva is tracking the recent critical security vulnerability impacting F5’s BIG-IP solution. The vulnerability, CVE-2023-46747, could allow an attacker to bypass authentication and potentially compromise the system via request smuggling. Imperva Threat Research has been actively monitoring this...

Wiz recognized as a 2023 Frost & Sullivan Radar Leader in Cloud Workload Protection Platform

In its 2023 Frost Radar™ analysis, Frost & Sullivan identified the top companies in the Global Cloud Workload Protection Platform CWPP market. Wiz is honored to be included on the list!...

Qualys Named a Market Leader in GigaOm Radar Report for Application Security Testing

Qualys Web Application Scanning WAS has been named a leader in the GigaOm Radar Report for Application Security Testing, 2023. Web app security is critical for every organization, for attacks on this vector caused 25% of breaches, according to the Verizon 2023 Data Breach Investigations Report. T...

Qualys Is the Outperformer in the New GigaOm Radar Report for Continuous Vulnerability Management

GigaOm has unveiled its third-annual Radar for Continuous Vulnerability Management featuring Qualys. In this Report, GigaOm provides a detailed analysis of the value and progression of vulnerability management VM capabilities to help organizations build the best security and vulnerability...

Malicious code in @ks-radar/radar-error-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a7e2199870f46f65ae301b77a8853c7c0203492bd65638277944190b9b406d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ks-radar/radar-resource-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87dc5d2bd88d23f785e0324f66bfd8597fbf9db14a34354d35c9578e0c98d0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ks-radar/radar-event-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ce11383a1d9efca79de168a03a8a27792a475fdc6ef35eaf6500d76bfc2d3f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Surviving the 800 Gbps Storm: Gain Insights from Gcore's 2023 DDoS Attack Statistics

Gcore Radar is a quarterly report prepared by Gcore that provides insights into the current state of the DDoS protection market and cybersecurity trends. This report offers you an understanding of the evolving threat landscape and highlights the measures required to protect against attacks...

Bejtlich Skills and Interest Radar from July 2005

This is unusual. I found this "skills and interest radar" diagram I created in July 2005. It looks like my attempt to capture and prioritize technical interests. At the time I was about to start consulting on my own, IIRC. Copyright 2003-2020 Richard Bejtlich and TaoSecurity...

Malicious code in zalando-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bcc871674553b866c3bc29c32b5fab13985f16987aab59fd1869d00d6b1359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1006 Malicious code in zalando-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bcc871674553b866c3bc29c32b5fab13985f16987aab59fd1869d00d6b1359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

What SOCs Need to Know About Water Dybbuk, A BEC Actor Using Open-Source Toolkits

We analyze a BEC campaign targeting large companies around the world that was leveraging open-source tools to stay under the radar...

Microsoft fixes driver blocklist placing users at risk from BYOVD attacks

There may be an all-new acronym for you to try and remember, as a result of Microsoft fixing a lingering issue. This issue is called Bring Your Own Vulnerable Driver BYOVD, and BYOVD has been popping up in various forms for the last few months. These attacks may have been less impactful if a...

MAL-2022-6621 Malicious code in tracker-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c53ce9c5aa038b64c2d5946bfb1750ad383a7642db3b922bb03aee63e8f307 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tracker-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c53ce9c5aa038b64c2d5946bfb1750ad383a7642db3b922bb03aee63e8f307 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tracker-radar-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c382860bcfb985e86aa7b648770475c9deebd558eb7815ffcd10f708348039a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...