Safari, Firefox updated for critical flaws

Organizations around the world have improved their cyber incident detection capabilities last year, with median dwell times dropping to 10 days, which is the lowest in a decade, and internal compromise detection rates rising from 37% in 2022 to 46% in 2023, SiliconAngle reports.

SecurityWeek reports that Siemens has confirmed that its Ruggedcom APE1808 devices configured with a Palo Alto Networks virtual next-generation firewall may be impacted by the actively exploited Palo Alto Networks firewall vulnerability, tracked as CVE-2024-3400.

Threat actors could potentially launch a software supply chain attack by exploiting a dependency confusion flaw impacting the archived Apache Cordova App Harness project, which had been discontinued five years ago, reports The Hacker News.