DataCenterNews US - Specialist news for cloud & data center decision-makers
United States

Security vulnerabilities Stories - Page 24

Global Stories

Security vulnerabilities stories

Video: 10 Minute IT Jams - SonicWall update on MSSP partnerships
Firewalls

Video: 10 Minute IT Jams - SonicWall update on MSSP partnerships

Today marks out third SonicWall presentation in the series, and we speak to SonicWall vice president, global MSSP & carrier sales Luca Taglioretti.

By Mitchell Hageman • 5 min read • Wed, 16th Feb 2022
Kaspersky uncovers multiple vulnerabilities in wearable tracking technology
Cybersecurity

Kaspersky uncovers multiple vulnerabilities in wearable tracking technology

Kaspersky finds 33 vulnerabilities in protocol for transmitting data from wearable devices, including 18 critical ones in 2021 alone.

By Ryan Morris-Reade • 3 min read • Thu, 3rd Feb 2022
Qualys adds advanced remediation capabilities to Cloud Platform
Risk & Compliance

Qualys adds advanced remediation capabilities to Cloud Platform

The new update enables organisations to fix asset misconfigurations, patch OS and third-party applications, and deploy custom software.

By Catherine Knowles • 3 min read • Wed, 2nd Feb 2022
Nucleus Security teams up with Mandiant to enhance vulnerability management programs with threat intelligence
Advanced Persistent Threat Protection

Nucleus Security teams up with Mandiant to enhance vulnerability management programs with threat intelligence

Nucleus Security has entered into a strategic partnership with Mandiant, the leader in dynamic cyber defense and response.

By Ryan Morris-Reade • 3 min read • Wed, 2nd Feb 2022
Container adoption approaching maturity at expense of security best practices
DevOps

Container adoption approaching maturity at expense of security best practices

More than 75% of running containers have vulnerabilities, partly as a result of ignoring security and operational best practices.

By Staff Writer • 3 min read • Thu, 27th Jan 2022
Supply chain vulnerability identified in SAP transport system
Supply Chain

Supply chain vulnerability identified in SAP transport system

Supply chain attacks on SAP software distribution process allow internal attackers to intervene undetected, says SecurityBridge. A patch has been released.

By Ryan Morris-Reade • 2 min read • Fri, 21st Jan 2022
Vulnerabilities pose danger to SonicWall SMA 100 remote access appliances
Identity and Access Management

Vulnerabilities pose danger to SonicWall SMA 100 remote access appliances

SonicWall and Australia's ACSC are urging all businesses using SonicWall SMA 100 Series appliances to patch the devices as soon as possible.

By Staff Writer • 3 min read • Thu, 20th Jan 2022
Gartner explains what security leaders need to know, and do, about Log4j
Malware

Gartner explains what security leaders need to know, and do, about Log4j

Log4j vulnerability prompts urgent action from security leaders. Gartner's Jonathan Care explains risks and steps to take.

By Ryan Morris-Reade • 3 min read • Tue, 28th Dec 2021
A new tool to help the MSP community combat Log4j
Partner Programmes

A new tool to help the MSP community combat Log4j

Datto is encouraging all MSPs to download a free script developed and made available on GitHub for any Remote Monitoring and Management solution.

By Ryan Morris-Reade • 3 min read • Mon, 27th Dec 2021
1 in 10 servers and web apps vulnerable to Log4Shell
DataCentre infrastructure

1 in 10 servers and web apps vulnerable to Log4Shell

Only 70% of organizations have scanned for the Log4Shell vulnerability, leaving 10% of assessed assets vulnerable, warns cybersecurity firm Tenable.

By Ryan Morris-Reade • 2 min read • Mon, 27th Dec 2021
What is Log4J and how does it affect you?
Marketing Technologies

What is Log4J and how does it affect you?

Log4J software bug, aka Log4Shell, sparks concern as it affects various platforms. Norton Labs offers advice on protecting systems and applications.

By Ryan Morris-Reade • 3 min read • Fri, 24th Dec 2021
New threat intelligence from Sophos following the Apache Log4Shell vulnerability
Malware

New threat intelligence from Sophos following the Apache Log4Shell vulnerability

Sophos warns of a surge in cyberattacks exploiting the Apache Log4Shell vulnerability, with attempts exceeding hundreds of thousands so far.

By Ryan Morris-Reade • 4 min read • Wed, 15th Dec 2021
Claroty and JFrog discover 14 vulnerabilities in Busybox
Open source

Claroty and JFrog discover 14 vulnerabilities in Busybox

Team82 and JFrog discover 14 vulnerabilities in the latest version of BusyBox, affecting OT and IoT devices running on Linux.

By Ryan Morris-Reade • 4 min read • Fri, 19th Nov 2021
New Microsoft Defender vulnerability should concern every enterprise - expert
Cybersecurity

New Microsoft Defender vulnerability should concern every enterprise - expert

Microsoft Defender vulnerability poses significant threat, warns Virsec. With 55 vulnerabilities in total, it is deemed the most concerning by experts.

By Shannon Williams • 3 min read • Mon, 15th Nov 2021
API vulnerabilities are a huge target for cyber criminals, report finds
EduTech

API vulnerabilities are a huge target for cyber criminals, report finds

API vulnerabilities pose a significant risk to companies and individuals worldwide, according to new research by Akamai Technologies.

By Catherine Knowles • 3 min read • Thu, 28th Oct 2021
ATM vulnerabilities open door for attacks - report
Breach Prevention

ATM vulnerabilities open door for attacks - report

Vulnerabilities in Wincor Cineo ATMs allow attackers to bypass encryption and make cash withdrawals, according to researchers.

By Ryan Morris-Reade • 3 min read • Thu, 28th Oct 2021
Interview: Invicti's Mark Ralls on the new defining age for web application security
Cybersecurity

Interview: Invicti's Mark Ralls on the new defining age for web application security

Invicti, the cybersecurity firm, has combined web application security expertise from its 2018 merger of Netsparker and Acunetix. .

By Sara Barker • 5 min read • Thu, 30th Sep 2021

Stories from Other Regions

Security vulnerabilities stories

Log4j actively exploited, serious complications can occur according to CERT NZ
Marketing Technologies

Log4j actively exploited, serious complications can occur according to CERT NZ

The widely-used java logging library, log4j, has been actively exploited, according to an update from CERT NZ and Catalyst.

By Mitchell Hageman • 2 min read • Mon, 13th Dec 2021