ChannelLife New Zealand - Industry insider news for technology resellers
New Zealand

Security vulnerabilities Stories - Page 11

Global Stories

Security vulnerabilities stories

Sonatype report highlights rising threats in open source
Supply Chain

Sonatype report highlights rising threats in open source

Sonatype's latest report reveals open source software now comprises 90% of modern development, with a staggering 156% rise in malicious packages.

By Catherine Knowles • 3 min read • Tue, 15th Oct 2024
NinjaOne launches AI tool & appoints data VP Carusone
Generative AI

NinjaOne launches AI tool & appoints data VP Carusone

NinjaOne elevates Joel Carusone to Senior Vice President of Data and AI, unveiling a new AI tool aimed at streamlining patch management for IT teams.

By Imee Dequito • 3 min read • Wed, 9th Oct 2024
October Patch Tuesday has revealed 118 Vulnerabilities
Open source

October Patch Tuesday has revealed 118 Vulnerabilities

Microsoft has addressed 118 vulnerabilities in its October 2024 Patch Tuesday, including five with evidence of exploitation, amid ongoing security concerns.

By Adam Barnett • 7 min read • Wed, 9th Oct 2024
Forescout discovers security flaws in DrayTek routers
Ransomware

Forescout discovers security flaws in DrayTek routers

Forescout Technologies has unveiled 14 security vulnerabilities in DrayTek routers, raising significant cybersecurity concerns globally and urging urgent protective measures.

By Catherine Knowles • 3 min read • Wed, 9th Oct 2024
Research shows workplace AI use outpaces security measures
Virtual Private Networks

Research shows workplace AI use outpaces security measures

Ivanti's report reveals a disconnect as 81% of employees using Gen AI lack training, raising security concerns; only 13% of security pros prioritise user experience.

By Shannon Williams • 3 min read • Fri, 4th Oct 2024
CrowdStrike under fire at US hearing after global IT outage
AI Security

CrowdStrike under fire at US hearing after global IT outage

CrowdStrike faced fierce questioning at a US congressional hearing following a global IT outage in July, raising doubts about its software management robustness.

By Shannon Williams • 3 min read • Fri, 27th Sep 2024
Leapwork report reveals flawed AI testing, highlights need for change
DevOps

Leapwork report reveals flawed AI testing, highlights need for change

A Leapwork survey reveals only 16% of firms find their software testing efficient, despite 85% having integrated AI, uncovering widespread performance issues.

By Shannon Williams • 3 min read • Thu, 19th Sep 2024
Entro Security report reveals critical risks in managing NHIs
Cybersecurity

Entro Security report reveals critical risks in managing NHIs

Report reveals grave cybersecurity flaws, with 97% of Non-Human Identities having excessive privileges and 44% of tokens exposed.

By Shannon Williams • 3 min read • Tue, 17th Sep 2024
HackerOne launches free tier for vulnerability disclosure program
Marketing Technologies

HackerOne launches free tier for vulnerability disclosure program

HackerOne has introduced Essential VDP, aiming to aid organisations in handling security vulnerabilities and meeting compliance standards.

By Shannon Williams • 3 min read • Tue, 17th Sep 2024
September Patch Tuesday has revealed 79 vulnerabilities
Cybersecurity

September Patch Tuesday has revealed 79 vulnerabilities

Microsoft's September Patch Tuesday addresses 79 vulnerabilities, including four critical RCEs and bugs with in-the-wild exploitation. Surprisingly, no browser patches yet.

By Adam Barnett • 6 min read • Wed, 11th Sep 2024
Opus security unveils advanced AI-driven vulnerability engine
Unified Communications

Opus security unveils advanced AI-driven vulnerability engine

Opus Security unveils its AI-powered Advanced Multi-Layered Prioritization Engine, revolutionising how organisations manage and address vulnerabilities.

By Catherine Knowles • 3 min read • Wed, 11th Sep 2024
HackerOne launches PartnerOne to expand global cybersecurity access
EduTech

HackerOne launches PartnerOne to expand global cybersecurity access

HackerOne has unveiled PartnerOne, a new channel partner programme designed to broaden access to its innovative cybersecurity solutions globally.

By Catherine Knowles • 3 min read • Fri, 6th Sep 2024
Revenera unveils OSS Inspector plugin for IntelliJ IDEA users
Risk & Compliance

Revenera unveils OSS Inspector plugin for IntelliJ IDEA users

Revenera launches OSS Inspector for IntelliJ IDEA, helping developers identify open source software risks directly in their IDE, ensuring secure, compliant code.

By Catherine Knowles • 3 min read • Thu, 5th Sep 2024
Tenable Nessus introduces new risk prioritisation features
Risk & Compliance

Tenable Nessus introduces new risk prioritisation features

Tenable unveils new features in Tenable Nessus, enhancing risk prioritisation with EPSS and CVSS v4 for improved vulnerability management and compliance.

By Imee Dequito • 3 min read • Thu, 5th Sep 2024
GitLab launches AI-driven GitLab Duo Enterprise at USD $39 per user
Physical Security

GitLab launches AI-driven GitLab Duo Enterprise at USD $39 per user

GitLab unveils GitLab Duo Enterprise at USD $39 per user/month, offering AI-driven enhancements for secure, efficient software development to Ultimate customers.

By Imee Dequito • 3 min read • Fri, 23rd Aug 2024
Cyber threats surge in gaming industry through 2024
Advanced Persistent Threat Protection

Cyber threats surge in gaming industry through 2024

Akamai's data shows a surge in cyber threats aimed at the gaming industry in 2024, with bot activity, web attacks, and DDoS attacks reaching record highs.

By Shannon Williams • 3 min read • Thu, 22nd Aug 2024

Stories from Other Regions

Security vulnerabilities stories

Survey: only 16% find their software testing efficient
DevOps

Survey: only 16% find their software testing efficient

Only 16% of organisations find their software testing effective amidst AI integration, revealing significant challenges and a need for better test practices.

By Shannon Williams • 3 min read • Thu, 19th Sep 2024
Finance sector lacking third-party risk plans despite DORA push
Supply Chain

Finance sector lacking third-party risk plans despite DORA push

Only 20.8% of finance professionals have stressed exit plans with suppliers, despite DORA recommendations, highlighting a key vulnerability exposed by a recent CrowdStrike outage.

By Catherine Knowles • 4 min read • Fri, 23rd Aug 2024