Site map
Here is the whole site on one page. If the menu does not get you there, this will.
Start here
Courses
- ISO 27001 courses: Foundation, Lead Implementer and Lead Auditor
- ISO/IEC 27001 Lead Implementer
- PECB Certified NIS2 Directive Lead Implementer
- ISO/IEC 27001 Lead Auditor
- Get Certified in the NIS 2 Directive: Foundation Course
- ISO/IEC 27001 Foundation
- ISO/IEC 27701 Lead Implementer (PECB)
- ISO/IEC 27005 Risk Manager
- ISO/IEC 42001 Lead Auditor, auditing an AI management system
- ISO/IEC 27701 Lead Implementer
- ISO/IEC 42001 Lead Implementer (PECB)
- ISO/IEC 27701 Lead Auditor
- PECB Certified Lead SOC 2 Analyst
- ISO/IEC 27701 Foundation
- PECB Certified Lead Cybersecurity Manager
- GDPR: Certified Data Protection Officer
- ISO/IEC 42001 Lead Implementer
- PECB Certified NIST Cybersecurity Professional
- ISO/IEC 42001 Lead Auditor
- PECB Certified Data Protection Officer (DPO)
- ISO/IEC 42001 Foundation
- PECB Certified Digital Transformation Officer
- ISO 22301 Lead Implementer
- ISO 22301 Lead Auditor
- ISO 22301 Foundation
- ISO 31000 Risk Manager
- ISO 37001 Lead Implementer
- ISO 37001 Lead Auditor
- ISO 37001 Foundation
- ISO 9001 Lead Implementer
- ISO 9001 Lead Auditor
- ISO 9001 Foundation
- ISO 45001 Lead Auditor
- ISO 14001 Lead Auditor
Products
Vulnerabilities
The vulnerability pages are a lookup service with several hundred entries. Search for the one you need rather than browsing.
Terms and privacy
News
The 60 most recent of 454 articles. The rest are in the overview.
- NIS2 and management accountability: what the directive actually says
- Critical SolarWinds Web Help Desk flaw allows code execution without login
- Five US agencies warn of active attacks on Siemens S7 controllers
- European Commission proposes to strengthen the EU's cyber resilience
- Cyberattack disrupts hospital operations in Antwerp
- FortiBleed: over 30,000 valid Fortinet credentials found in attacker hands
- Russian campaign exploits misconfiguration, not vulnerabilities, in edge devices
- Extortion without encryption: Unit 42 on the new extortion economy
- Showboat: new Linux malware targeting telecom providers
- Malware knocked out phones and internet at the AnMed health system
- CISA warns of increased attacks on control units in water and wastewater
- More than 30 municipal water utilities lost control of their systems
- Hacking group says an unpatched PeopleSoft flaw gave it FBI employee data
- Australia says an OpenAI agent reached non-public files on a government portal
- A backdoor built from ordinary Windows tools keeps taking new documents
- New malware puts its next move to a vote among four AI models
- Every build of the Vidar stealer decodes its strings a different way
- New malware looks up its command server in a Polygon smart contract
- An unauthenticated request could read files off a GitLab server
- Four years in prison for one of Conti's developers
- Swedish regulator fines a system supplier SEK 1.8 million after sick leave data leaked
- The Sality botnet has been disrupted after 23 years
- Invisible characters hidden inside words carry phishing past the email filter
- Attackers fetch Node.js from the official site to run their malware
- Two open ports give root code execution on Cisco Nexus 9000 switches
- A flaw in Chrome's JavaScript engine is already being exploited
- Two SSH flaws hand attackers full control of MikroTik routers
- Phishing as a service steals the session after MFA has been passed
- A zero day in Magento was exploited for three days before Adobe shipped a fix
- Seven new KEV entries, three of them in open developer components
- The Netherlands proposes a law widening intelligence service powers
- Three of WatchGuard's 27 new flaws can be exploited without logging in
- Permission to park a domain can hand over the entire server
- A fake CAPTCHA gets the user to open a tunnel into the network
- A Word macro was the way in at defence manufacturers and government bodies
- Four flaws in the ServiceNow AI Platform need no login to exploit
- The vendor confirms ongoing attacks against every version of PaperCut
- Two men charged over malicious code planted in an open source repository
- Nine vulnerabilities entered the exploited catalogue in two days
- Iran-linked group hides its backdoor inside a fake Windows DLL
- Attackers are letting npm mirrors host their fake Cloudflare page
- Five remote hires turned out to be probable North Korean workers
- Seizing the hard-coded domains left both hacking platforms dead
- Three of the 22 UniFi flaws score a straight ten
- Five of the six new KEV entries date from 2015 to 2022
- Most compromises still come down to basic security failures
- Sending the same patch twice gives attackers shell access to Gitea servers
- Nine advisories in one day, from brake computers to ship transponders
- A new backdoor does nothing at all until one crafted packet arrives
- Only one of the 91 vulnerabilities Spring patched is rated critical
- Attackers are exploiting the plug-in in front of Oracle WebLogic
- Hard-coded credentials in the FA-50 AIS transponder will never be fixed
- Flaws in a truck brake control unit can knock out ABS
- Two SharePoint flaws chain into code execution without a login
- A small British power plant reportedly stayed offline for four days after a cyberattack
- Personal data exposed after a social engineering attack on Apollo
- Almost a third of this week's listed vulnerabilities have no severity score
- Russian clusters bypass two step verification by asking for app passwords
- Hijacked Rust crates ran malicious code during the build
- CISA updates the Medusa advisory, more than 500 organisations hit
For search engines
The site also has a machine-readable map with every address, in Norwegian and English.