Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks
ID: 646af012-d31e-5704-ac8c-800a07f03bf3
STIX ID: report--646af012-d31e-5704-ac8c-800a07f03bf3
Feed Name: HackerOne Blog
Threat Score
This weekly cybersecurity roundup covers key items: MITRE’s 2022 CWE Top 25 release; an OpenSea vendor-related breach exposing user email addresses; an alleged massive Shanghai police database leak reportedly containing up to one billion citizens' personal records offered for sale; Microsoft and CISA urging migration away from Basic Authentication; the Hertzbleed CPU side-channel research (currently mostly of academic concern); and ongoing software supply-chain risks and mitigation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.