0

January 14, 2022

Audits / Cloud Security / Compliance / Data Protection / Email Security / Endpoint Security / Fraud & Identity Theft / Malware / NEWS & INDUSTRY / Phishing / Privacy / Risk Management / Security Architecture / Virus & Malware / Vulnerabilities

Details Published on AWS Flaws Leading to Data Leaks

Researchers at cloud security startup Orca Security have publicly documented a pair of vulnerabilities in AWS CloudFormation and AWS Glue that attackers could use to...

0

January 13, 2022

Application Security / Audits / Cloud Security / Compliance / Data Protection / Disaster Recovery / Email Security / Endpoint Security / Identity & Access / Incident Response / Malware / Network Security / NEWS & INDUSTRY / Risk Management / Security Architecture / Virus & Malware / Vulnerabilities / White Papers

FCC Chair Proposes New Policies for Carrier Data Breach Reporting

Federal Communications Commission (FCC) chairwoman Jessica Rosenworcel this week proposed updated policies around telecom providers’ reporting of data breaches. The Notice of Proposed Rulemaking...

0

January 12, 2022

Application Security / Audits / Cloud Security / Data Protection / Email Security / Endpoint Security / Fraud & Identity Theft / Identity & Access / Malware / Mobile Security / Network Security / NEWS & INDUSTRY / Phishing / Privacy / Virus & Malware / Vulnerabilities / Wireless Security

Apple Patches iOS HomeKit Flaw After Researcher Warning

Apple has released an iOS security update with a fix for a persistent denial-of-service flaw in the HomeKit software framework but only after an...

0

January 10, 2022

Application Security / Audits / Cloud Security / Compliance / Cyberwarfare / Data Protection / Email Security / Endpoint Security / Fraud & Identity Theft / Identity & Access / Malware / Network Security / NEWS & INDUSTRY / Phishing / Privacy / Virus & Malware / Vulnerabilities

Apache Foundation Calls Out Open-Source Leechers

The Apache Software Foundation (ASF) is calling out for-profit companies leeching on open-source code, warning that “only a tiny percentage” of downstream vendors are...

0

January 7, 2022

Application Security / Audits / Cloud Security / Compliance / Data Protection / Email Security / Endpoint Security / Identity & Access / Malware / Network Security / NEWS & INDUSTRY / Tracking & Law Enforcement / Virus & Malware / Vulnerabilities

Attackers Hitting VMWare Horizon Servers With Log4j Exploits

Threat hunters in the U.K.’s National Health Service have raised an alarm for an unknown threat actor hitting vulnerable VMWare Horizon servers with exploits...

0

January 5, 2022

Application Security / Audits / Cloud Security / Cyberwarfare / Data Protection / Email Security / Endpoint Security / Fraud & Identity Theft / Identity & Access / Malware / Network Security / NEWS & INDUSTRY / Phishing / Privacy / Virus & Malware / Vulnerabilities

VMware Plugs Security Holes in Workstation, Fusion and ESXi

VMware this week shipped security updates for its Workstation, Fusion and ESXi product lines, warning that a heap-overflow vulnerability could expose users to code...

0

January 5, 2022

Application Security / Audits / Cloud Security / Compliance / Cyberwarfare / Data Protection / Disaster Recovery / Email Security / Endpoint Security / Fraud & Identity Theft / Identity & Access / Incident Response / Malware / Network Security / NEWS & INDUSTRY / Phishing / Risk Management / Security Architecture / Tracking & Law Enforcement / Virus & Malware / Vulnerabilities

Recorded Future Acquires SecurityTrails in $65M Deal

With eyes firmly set on the booming attack surface management space, threat intel powerhouse Recorded Future is shelling out $65 million to purchase SecurityTrails,...

0

January 4, 2022

Application Security / Audits / Cloud Security / Compliance / Cyberwarfare / Data Protection / Email Security / Endpoint Security / Fraud & Identity Theft / Identity & Access / Malware / Network Security / NEWS & INDUSTRY / Phishing / Virus & Malware / Vulnerabilities

Google Acquires Siemplify in Ambitious Cybersecurity Push

Google has expanded its push into the lucrative cybersecurity business with a new deal to acquire Siemplify, a late-state Israeli startup selling SOAR (security...

0

December 22, 2021

Application Security / Audits / Cloud Security / Compliance / Data Protection / Disaster Recovery / Email Security / Endpoint Security / Identity & Access / Incident Response / Malware / Network Security / NEWS & INDUSTRY / Security Architecture / Virus & Malware / Vulnerabilities

Microsoft Confirms ‘NotLegit’ Azure Flaw Exposed Source Code Repositories

Microsoft has quietly started notifying some Azure customers that a serious security vulnerability in the Azure App Service has caused the exposure of hundreds...

0

December 22, 2021

Application Security / Audits / Cloud Security / Compliance / Cyberwarfare / Data Protection / Disaster Recovery / Email Security / Endpoint Security / Fraud & Identity Theft / Identity & Access / Incident Response / Malware / NEWS & INDUSTRY / Phishing / Privacy / Risk Management / Virus & Malware / Vulnerabilities

Ubisoft Confirms Unauthorized Access to ‘Just Dance’ User Data

French video game company Ubisoft this week confirmed that ‘Just Dance’ user data was compromised in a recent cybersecurity incident. The data breach was...