News Highlights
December 15, 2020
Glassdoor Corrects CSRF Bug
A bug bounty hunter has discovered a critical vulnerability on employer review platform Glassdoor’s web domain. The flaw involves a cross-site request forgery (CSRF) that, if exploited, could allow attackers to hijack user accounts.
Cyberwire covered the news, also tapped K2’s CTO Jayant Shukla, who provides commentary on the security event.
Recent News Highlights
-
7 Steps to Secure a Wordpress Site -
Take It From NIST: Data and Digital Architecture Requires Application Security -
Fourth Breach at T-Mobile Puts Focus on Security Post Mergers -
In December 2020, the cybersecurity industry surpassed the total number of common vulnerabilities and exposures (CVE) recorded in all of 2019, according to the US-CERT Vulnerability Database analysis from K2 Cyber Security. -
US-CERT Reports 17,447 Vulnerabilities Recorded in 2020 - << Back to news