Focus on physical threats left maritime sector short on cybersecurity, says DHS chief - SC Media

Focus on physical threats left maritime sector short on cybersecurity, says DHS chief  SC Media
http://dlvr.it/SMrVz8

GitLab Releases Patch for Critical Vulnerability That Could Let Attackers Hijack Accounts

DevOps platform GitLab has released software updates to address a critical security vulnerability that, if potentially exploited, could permit an adversary to seize control of accounts. Tracked as CVE-2022-1162, the issue has a CVSS score of 9.1 and is said to have been discovered internally by the GitLab team. "A hardcoded password was set for accounts registered using an 
http://dlvr.it/SMr7Bj

CISOs see opportunities amid heightened cybersecurity risks - Healthcare IT News

CISOs see opportunities amid heightened cybersecurity risks  Healthcare IT News
http://dlvr.it/SMptqn

CVE-2022-27175

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. (CVSS:10.0) (Last Update:2022-04-01)
http://dlvr.it/SMpcPy

Documents reveal financial fallout of Salt Lake City IT security breach - KSLTV

Documents reveal financial fallout of Salt Lake City IT security breach  KSLTV
http://dlvr.it/SMpH8L

Cyber Attack in Greenland - High North News

Cyber Attack in Greenland  High North News
http://dlvr.it/SMnqq0

Apple Issues Patches for 2 Actively Exploited Zero-Days in iPhone, iPad and Mac Devices

Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile and desktop operating systems that it said may have been exploited in the wild. The shortcomings have been fixed as part of updates to iOS and iPadOS 15.4.1, macOS Monterey 12.3.1, tvOS 15.4.1, and watchOS 8.5.1. Both the vulnerabilities have been reported to Apple anonymously. Tracked as CVE-2022-22675,
http://dlvr.it/SMnHc5