Security vulnerabilities Stories - Page 21

Global Stories

Security vulnerabilities stories

GreyNoise Intelligence identifies exploitation threats for 2023

GreyNoise Intelligence unveils its 2022 Mass Exploitation Report, delving deep into threat detection events from the past year.

By Catherine Knowles • 3 min read • Fri, 23rd Dec 2022

Advanced Persistent Threat Protection

Iran-sponsored group using GitHub to deploy custom malware

The Secureworks Counter Threat Unit (CTU) has uncovered a subgroup of Iranian Cobalt Mirage using GitHub to store and deploy malware.

By Zach Thompson • 3 min read • Tue, 13th Dec 2022

Hyperscale

Rapid7 unveils new capabilities to simplify CDR at AWS event

Rapid7 showcases new capabilities at AWS re:Invent 2022 to make cloud detection and response and vulnerability assessments easier.

By Zach Thompson • 3 min read • Thu, 1st Dec 2022

Software-as-a-Service

Varonis Systems launches new program through HackerOne

Data security and analytics pioneer Varonis Systems has launched its public vulnerability disclosure program through HackerOne.

By Zach Thompson • 3 min read • Thu, 1st Dec 2022

EduTech

Forescout's Vedere Labs details OT vulnerabilities in latest study

Forescout's Vedere Labs disclosed an update to its OT:ICEFALL study distributed in June 2022, which detailed vulnerabilities found in thousands of OT devices.

By Catherine Knowles • 3 min read • Wed, 30th Nov 2022

Advanced Persistent Threat Protection

Gallagher named Security Software Manufacturer of the Year

Global security manufacturer Gallagher has been awarded the Security Software Manufacturer of the Year accolade at the 2022 Security & Fire Excellence Awards.

By Mitchell Hageman • 3 min read • Mon, 28th Nov 2022

Digital Transformation

Application Portfolio Management: A quick win today or a crisis tomorrow

It's highly likely that Application Portfolio Management (APM) isn't at the top of your to-do list. It may not even be on your list anymore.

By Shan Yong • 4 min read • Wed, 23rd Nov 2022

EduTech

HackerOne launches Gold Standard Safe Harbour statement

The GSSH is a short, broad, easily-understood safe harbour statement that's simple for customers to adopt, HackerOne states.

By Catherine Knowles • 3 min read • Thu, 17th Nov 2022

Human Capital Management

Genetec warns against cyber crime risk from older systems

With the ever-increasing rise in cyber crime, Genetec is cautioning organisations of all sizes to be vigilant about the cybersecurity risk.

By Catherine Knowles • 3 min read • Thu, 17th Nov 2022

Firewalls

Varonis Labs discovers SQLi and access flaws in Zendesk

Varonis helped solve an SQLi vulnerability and an access control flaw in Zendesk Explore that would have allowed a threat actor to leak data.

By Gaurav Sharma • 4 min read • Wed, 16th Nov 2022

Application Security

Aqua Security unveils new Lightning Enforcer offering

Aqua Security launches Lightning Enforcer, an eBPF-based technology that provides real-time protection against zero-day attacks.

By Zach Thompson • 4 min read • Wed, 16th Nov 2022

Internet of Things

Building on the 'Essential Eight' with a people-centric approach to cybersecurity

Organisations often combat threats by placing too much emphasis on technology alone and too little emphasis on people and their behaviour.

By Yvette Lejins • 5 min read • Wed, 16th Nov 2022

Marketing Technologies

Text4Shell++ - Where there's smoke, there's fire

Apache's watchTowr Platform has identified dangerous string interpolation operators that could be abused by attackers. .

By Aliz Hammond • 8 min read • Mon, 14th Nov 2022

Ransomware

Claroty's Team82 uncovers new ABB TotalFlow vulnerability

New vulnerability found in ABB TotalFlow flow computers and controllers exposes oil and gas utilities to potential attacks.

By Mitchell Hageman • 2 min read • Mon, 14th Nov 2022

Ransomware

Flashpoint releases a new ransomware prediction model

It links individual vulnerabilities in ransomware operations, helping vulnerability management teams prevent potential cyber extortion events with VulnDB.

By Gaurav Sharma • 3 min read • Fri, 11th Nov 2022

Application Performance Monitoring

GitHub Universe: company unveils new enterprise products

GitHub has announced a range of new products designed to accelerate the company's push into major enterprises at its San Francisco event.

By Zach Thompson • 2 min read • Thu, 10th Nov 2022

Marketing Technologies

Video: 10 Minute IT Jams - An update from Azul

Today on 10 Minute IT Jams, we are joined by Erik Costlow, who is the Senior Director of Product Management, Azul.

By Zach Thompson • 5 min read • Wed, 9th Nov 2022

Software-as-a-Service

Azul launches a new Saas to secure software supply chain

Azul's Vulnerability Detection, the new SaaS product, continuously detects vulnerabilities in Java applications by eliminating false positives.

By Gaurav Sharma • 4 min read • Fri, 4th Nov 2022

Stories from Other Regions

Security vulnerabilities stories

Malware

China-based threat group targeting SE Asia, says Mandiant

Identified as UNC4191, this cyber espionage threat leverages USB devices as an initial infection vector, concentrates on the Philippines, and has a China nexus.

By Gaurav Sharma • 3 min read • Fri, 9th Dec 2022

Email Security

ASX 200 companies on-par with FTSE 350, Fortune 500 - report

ASX 200 companies have a good security posture, on-par with global counterparts, according to a new report by Rapid7.

By Zach Thompson • 4 min read • Mon, 5th Dec 2022