Vulnerability: Page 19

  • A picture of the Microsoft campus in Redmond, Washington.
    Image attribution tooltip
    Stephen Brashear/Stringer via Getty Images
    Image attribution tooltip

    Microsoft investigating 2 zero-day vulnerabilities in Exchange Server

    One vulnerability is a server-side request forgery, while the second allows remote-code execution when an attacker has access to PowerShell. 

    By • Sept. 30, 2022
  • Technologist shows two customers how to use enterprise software at desktop computer
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Strict security rules could push open source community out of federal work, expert says

    Agency CISOs and development experts say federal agencies need to work collaboratively with open source community contributors.

    By • Sept. 27, 2022
  • Concept with expert setting up automated software on laptop computer.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Organizations rapidly shift tactics to secure the software supply chain

    Synopsys’ 13th annual BSIMM study shows rapid increases in automation and use of SBOMs among software producers and other organizations.

    By • Sept. 22, 2022
  • An image of the White House.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    White House guidance on third-party software seen as a major test of cyber risk strategy

    The U.S. hopes that by forcing software producers to meet a set of minimum security standards for federal use, a new baseline strategy will be adopted industrywide. 

    By • Sept. 19, 2022
  • Cyberattack and internet crime, hacking and malware concepts.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Researchers warn older D-Link routers are under threat from Mirai malware variant

    Attackers are leveraging vulnerabilities in the devices to build botnets and launch DDoS attacks, according to Palo Alto Networks research.

    By • Sept. 8, 2022
  • Two people sitting on a stage during a conference, with a U.S. flag in the background.
    Image attribution tooltip
    Permission granted by Billington CyberSecurity
    Image attribution tooltip

    CISA Director: Tech industry should infuse security at product design stage

    Agency director Jen Easterly outlined a push for faster incident reporting and closer industry collaboration.

    By • Sept. 7, 2022
  • Concept with expert setting up automated software on laptop computer.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Feds push for developers to take lead in securing software supply chain

    The guidelines from CISA and the NSA come amid a growing movement to “shift left” and evaluate software security earlier in the development cycle. 

    By • Sept. 2, 2022
  • close up programmer man hand typing on keyboard laptop for register data system or access password at dark operation room , cyber security concept - stock photo
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    SaaS sprawl amps up security challenges amid heightened risk

    Two-thirds of businesses say they're spending more on SaaS applications year over year, Axonius data shows.

    By Roberto Torres • Sept. 1, 2022
  • Image attribution tooltip
    Getty
    Image attribution tooltip

    Growing cyber risks add to hospital cost squeeze, Fitch cautions

    Cyber risk mitigation is becoming more expensive, but with hospitals' cost pressures mounting, spending on security may not be a priority, the ratings agency said.

    By Susan Kelly • Aug. 31, 2022
  • A screen with the Slack logo on the trading floor of the New York Stock Exchange.
    Image attribution tooltip
    Drew Angerer via Getty Images
    Image attribution tooltip

    Slack enhances platform security amid rapid expansion and heightened risk

    The enterprise messaging platform has faced increased customer concerns about security and privacy.

    By • Aug. 31, 2022
  • Google logo displayed outside the company's New York City office.
    Image attribution tooltip
    Drew Angerer via Getty Images
    Image attribution tooltip

    Google tackles open source security with vulnerability rewards program

    The program follows a surge in supply chain attacks impacting the open source software ecosystem.

    By • Aug. 30, 2022
  • Woman Walking On Staircase Of Building
    Image attribution tooltip
    Getty Images
    Image attribution tooltip
    Sponsored by Delinea

    How does Privileged Access Management work?

    The model is a framework to help you set the right PAM foundation and get your organization on the PAM journey, now and in the future.

    Aug. 29, 2022
  • A Cisco logo with blue lights strands in the background.
    Image attribution tooltip
    David Ramos via Getty Images
    Image attribution tooltip

    Researchers say Cisco firewall software remains vulnerable to attack despite patch

    Rapid7 researchers also warn only a very small percentage of users have applied updates.

    By • Aug. 26, 2022
  • Programming scripts on laptop monitor, unauthorized remote hacking of server
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Threat actors again target critical SAP ICMAD vulnerabilities

    CISA added the most critical SAP vulnerability to its Known Exploited Vulnerabilities Catalog last week.

    By • Aug. 23, 2022
  • Cyberattack and internet crime, hacking and malware concepts.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Media companies at high risk of malicious cyberattack: Report

    The media industry is highly dependent on third-party vendor relationships and is often slow to respond to vulnerabilities, BlueVoyant research found.

    By • Aug. 22, 2022
  • A group of co-workers surround a computer screen
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    DigitalOcean, caught in Mailchimp security incident, drops email vendor

    An attack on the email marketing firm raises questions about the continued risk of a supply chain compromise. 

    By • Aug. 17, 2022
  • Illustration of locks layered above circuity.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    The same old problems nag cybersecurity professionals

    Technical complexities abound as the perceived level of risk rises in an unrelenting fashion.

    By • Aug. 17, 2022
  • Cyberattack and internet crime, hacking and malware concepts.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    How attackers are breaking into organizations

    Threat actors lean heavily on phishing attacks, vulnerabilities in software and containers, and stolen credentials, according to top cyber vendor research.

    By • Aug. 15, 2022
  • close up programmer man hand typing on keyboard laptop for register data system or access password at dark operation room , cyber security concept - stock photo
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Log4j was the right incident for inaugural review, safety board says

    The Cyber Safety Review Board worked with 80 different global stakeholders to better understand the Log4j incident — and its downstream potential. 

    By • Aug. 11, 2022
  • cybersecurity stock photo
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Businesses boost software supply chain security, but strategies remain fragmented

    A study by the Enterprise Strategy Group shows more than one-third of organizations have been exploited by a known open source vulnerability.

    By • Aug. 9, 2022
  • Image attribution tooltip
    Justin Sullivan via Getty Images
    Image attribution tooltip

    Twitter vulnerability risk resurfaces, testing the security of pseudonymous users

    A threat actor learned of the vulnerability, which allowed an account identity to be exposed by entering a simple email or phone number.

    By • Aug. 8, 2022
  • A password field reflected on a eye.
    Image attribution tooltip
    Leon Neal via Getty Images
    Image attribution tooltip

    Slack resets passwords en masse after invite link vulnerability

    The bug, which went undetected for five years, impacts at least 60,000 users but likely more.

    By • Aug. 5, 2022
  • Blue padlock made to resemble a circuit board and placed on binary computer code.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    VMware discloses new authentication bypass vulnerability

    The virtualization giant advised customers to immediately deploy patches and said it’s not aware of any exploitation in the wild.

    By • Aug. 2, 2022
  • Ransomware virus has encrypted data. Attacker is offering key to unlock encrypted data for money.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Most cyberattacks come from ransomware, email compromise

    Attackers are scanning for vulnerabilities in unpatched systems within 15 minutes, stressing the pace and scale of the threat.

    By • Aug. 1, 2022
  • Programming scripts on laptop monitor, unauthorized remote hacking of server
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Threat actors shifting tactics as Microsoft blocks, unblocks and reblocks macros

    Proofpoint researchers say criminal hackers are turning to container files and Windows shortcuts to distribute malware.

    By • July 29, 2022