What does the CVE-2024-4367 PDF.js vulnerability impact?
Watch the full video for more...
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
9 Docker Pro Tips that will LEVEL UP your Skills
In this video, we will be uncovering 9 Docker shortcuts that will be sure to boost your productivity! If you're looking to secure your Docker containers even further, check out Snyk’s robust security solutions.
What is the CVE-2024-4367 PDF.js Vulnerability?
Watch the full video for more...
Why You Should be AFRAID of PDF Files - PDF.js CVE-2024-4367
A significant vulnerability was discovered in the widely used library PDF.js. In this video, we take a look at what the vulnerability is, where it came from, who it impacts and how you can mitigate it.
Privacy Act 1988 Australia
The response in September 2023 by the Australian government outlined reforms to the existing Privacy Act 1988 from the Office of the Australian Information Commissioner (OAIC). These reforms aim to bring Australian privacy laws up to date with the digital age and give citizens more control over their personal information which may affect your businesses starting in 2024.
Seccomp for Kubernetes workloads
Seccomp, short for Secure Computing Mode, is a security feature in the Linux kernel that plays a role in enhancing the security of systems. Initially introduced in Linux kernel 2.6.12 in 2005, seccomp was designed to restrict the system calls a process can make, effectively reducing the attack surface and limiting potential damage from compromised processes.
Proactive network management with strategic scheduling of DNS and DHCP objects and reports
In the complex and often fluid world of network management, the ability to swiftly adapt to changing requirements is paramount. This is especially true in scenarios involving temporary projects, testing environments, or seasonal events that generate unusually high traffic. Using ManageEngine DDI Central, you can schedule the activation of DHCP objects—like subnets, shared networks, host or DHCP reservations, client classes, and DNS changes—at specific times, making a significant difference.
How GitGuardian Enhanced Vermeer's Software Development Security
In the rapidly evolving world of software development, maintaining robust security protocols is paramount. For Vermeer Corporation, a leading manufacturer of large agricultural and industrial machinery, embedding security into their software development lifecycle was a significant challenge. That is until they discovered GitGuardian. CJ May, a senior IT Security Analyst at Vermeer Corporation, shared his experience of integrating GitGuardian into their software development process. He described the tool as "invaluable for any security program.".
NVD Update: Help Has Arrived
NIST has announced that it has filled the funding gap for the National Vulnerability Database (NVD) and hired a contractor to return it to its previous underwhelming state. What does that mean for us? Basically, The NVD is off life support, but we wouldn’t say it’s healthy. It’s more like “undead”.
IIS Host headers - One host, many headers
Most websites do not have their own individual server, instead they share a server along with multiple other websites and applications. All websites hosted from this server will therefore have the same IP address. This can be problematic as the server can’t differentiate which website to serve if many websites are hosted on the same IP address and port. It will serve the default website regardless of the requested domain.