As cybersecurity professionals, we admit it: zero trust has become the industry’s biggest buzzword. Some argue it’s a principle, others argue it’s a framework, others still that it’s mostly an architecture. The truth – which I hope we can all agr…
Month: February 2022
Global Security News, North America
Lack of visibility plaguing ICS environments
by Help Net Security •
Dragos released its report on cyber threats facing industrial organizations, naming the emergence of three new threat groups targeting ICS/OT environments, including two that have gained access into the OT systems of industrial organizations. The repor…
Europe, Global Security News, North America
The Rise of Cybercrime – An Overview
by Geetha R •
Cybercrimes are more rampant in the year 2022. The rate of cybercrimes is increasing every year, and it is expected to reach its highest next year. It is said that cybercrime affects the security of more than 80% of businesses […]
The post The Rise of …
Exploits, Global Security News
The Great Resignation’s High Employee Turnover Increasing Need for CybeReady Adaptive Training Platform
by PricillaWhite •
The Great Resignation’s high employeetransition rate has increased the vulnerability of organizations due to a larger percentage of new, untrained employees outside of established security-aware cultures. With remote work environments expanding globall…
Global Security News, North America
How businesses benefited from cloud transformation
by Help Net Security •
Aptum released a report which explores the deployment of workloads on different cloud infrastructures and examines the decision-making process behind their placement. The majority of IT decision-makers plan to increase their organization’s use of publi…
Vulnerabilities
CVE-2021-43619
by National Vulnerability Database •
Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.
Europe, Global IT News
MWC: BlackRock’s new HQ will use Verizon 5G for high-speed connectivity
by Latest news •
The deal with the major financial firm showcases how private 5G networks can be used in lieu of wi-fi at facilities that require secure, fast networks.
Global Security News, North America
IoT security is foundational, not optional
by Help Net Security •
A PSA Certified report predicts that this year will mark a turning point in securing the Internet of Things (IoT), as the industry collectively commits to addressing the historic lag between the rate of digital transformation and the speed of securing …
Global IT News
Kao Data expands Harlow datacentre campus by opening second 10MW facility
by ComputerWeekly.com •
Read the Article
North America
CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog
by Ravie Lakshmanan •
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day flaw in the Zimbra email platform citing evidence of active exploitation in the wild.
Tracke…
Global Security News, North America
The importance of balancing security requirements and employee user experience
by Help Net Security •
LastPass released the findings of an IDC survey which revealed that “balancing company security requirements and the employee user experience” is the number one identity challenge, followed by “employees struggling with too many passwords.”…
Global Security News, North America
Security and vulnerability management market to reach $15.86 billion by 2030
by Help Net Security •
The global security and vulnerability management market is expected to grow from $6.7 billion in 2020 to $15.86 billion by 2030, at a CAGR of 9% during the forecast period 2021-2030, according to The Brainy Insights. A security vulnerability is an unex…
Europe, Global IT News
Tasmanian internet connectivity hit by cable cuts
by Latest news •
On Tuesday afternoon, the Apple Isle found itself somewhat disconnected from the wider world.
Europe, Global IT News
Toshiba CEO Satoshi Tsunakawa announces resignation
by Latest news •
The company’s corporate senior vice president, Taro Shimada, has been named as the new replacement.
Global Security News, North America
Infosec products of the month: February 2022
by Mirko Zorz •
Here’s a look at the most interesting products from the last month, featuring releases from: Arista Networks, Blueshift Cybersecurity, Bugcrowd, Cato Networks, Cofense, CoSoSys, Cybellum, Cymulate, Darktrace, DataStax, F5 Networks, Federal Reserv…
Global Security News, North America
Open XDR Summit: Showing how Open XDR transforms security operations today
by Help Net Security •
Open XDR Summit is a community of cybersecurity professionals who are using Open XDR to cost-effectively reduce risk while dramatically improving productivity and confidence. The Open XDR Summit brings together security practitioners and vendors from t…
Global Security News, North America
CybeReady Adaptive Training Platform enhancements improve corporate security posture
by Industry News •
CybeReady unveiled major enhancements to its Adaptive Training Platform as global workforces experience churn as a result of pandemic related security issues and The Great Resignation. The new capabilities increase the scope of impact on remote work en…
Global Security News, North America
CybeReady Adaptive Training Platform enhancements improve corporate security posture
by Industry News •
CybeReady unveiled major enhancements to its Adaptive Training Platform as global workforces experience churn as a result of pandemic related security issues and The Great Resignation. The new capabilities increase the scope of impact on remote work en…
Global IT News
Post Office Horizon scandal enters public conscience – at last
by ComputerWeekly.com •
Read the Article
Global Security News, North America
Palo Alto Networks Prisma SASE provides network security and SD-WAN requirements for MSPs
by Industry News •
Managed service providers (MSPs) have struggled to deliver SASE services cost-effectively at scale because current SD-WAN and secure access solutions for the hybrid work force lack automation, requiring manual configuration and support for disparate pr…
Global Security News, North America
Palo Alto Networks Prisma SASE provides network security and SD-WAN requirements for MSPs
by Industry News •
Managed service providers (MSPs) have struggled to deliver SASE services cost-effectively at scale because current SD-WAN and secure access solutions for the hybrid work force lack automation, requiring manual configuration and support for disparate pr…
Global Security News
A Free-for-All But No Crippling Cyberattacks in Ukraine War
by Associated Press •
Russia has some of the best hackers in the world, but in the early days of the war in Ukraine, its ability to create mayhem through malware hasn’t had much of a noticeable impact.
read more
Global Security News, North America
Syniverse Hyperscale Communications Platform allows enterprises to elevate their digital transformation
by Industry News •
Syniverse launched a cloud-native, hyper-scale digital engagement platform to improve enterprises’ customer experiences and accelerate their digital transformations. The Syniverse Hyperscale Communications Platform allows enterprises to easily elevate …
Vulnerabilities
CVE-2022-24446
by National Vulnerability Database •
An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user information) even if no SSH server or user is associated to the operator.
Vulnerabilities
CVE-2021-42767
by National Vulnerability Database •
A directory traversal vulnerability in the Apoc plugins in Neo4J Graph database 4.0.0 through 4.3.6 allows attackers to read local files.
Vulnerabilities
CVE-2022-22262
by National Vulnerability Database •
ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this function does not validate the path before deletion, an unauthenticated local at…
Vulnerabilities
CVE-2021-44962
by National Vulnerability Database •
An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger…
Vulnerabilities
CVE-2022-25018
by National Vulnerability Database •
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages.
Vulnerabilities
CVE-2022-25020
by National Vulnerability Database •
A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post.
Vulnerabilities
CVE-2020-12775
by National Vulnerability Database •
Hicos citizen certificate client-side component does not filter special characters for command parameters in specific web URLs. An unauthenticated remote attacker can exploit this vulnerability to perform command injection attack to execute arbitrary s…
Vulnerabilities
CVE-2021-44961
by National Vulnerability Database •
A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A Specially crafAn out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Comm…
Vulnerabilities
CVE-2022-25022
by National Vulnerability Database •
A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post.
Vulnerabilities
CVE-2021-42951
by National Vulnerability Database •
A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can procee…
Europe, Exploits, Global Security News, Latin America, Malware Indicators (IoCs), North America
ISC StormCast for Tuesday, March 1st, 2022
by Dr. Johannes B. Ullrich •
PHP Patches Code Injection Flaw
https://nvd.nist.gov/vuln/detail/CVE-2021-21708
https://bugs.php.net/bug.php?id=81708
Mozilla VPN Local Privilege Escalation
https://www.mozilla.org/en-US/security/advisories/mfsa2022-08/
Google Captcha Breaking
http…
Global Security News
CISO Checklist for Offboarding Security Staff
by Pam Baker, Contributing Writer •
The Great Resignation strikes cybersecurity teams too. Here’s a checklist for CISOs to ensure security is retained even as security staff is not.
Europe, Global IT News
MacTel warns critical infrastructure reforms create gaps in government data protection
by Latest news •
The cloud and data provider also sees a potential future where critical infrastructure providers and their suppliers shift data stores and processing functions offshore to avoid being regulated.
Europe, Global Security News, North America
Look Beyond External Threats to Insider Threats
by Sanjay Raja •
We must never forget to look beyond external threats to insider threats to secure our…
The post Look Beyond External Threats to Insider Threats appeared first on Gurucul.
The post Look Beyond External Threats to Insider Threats appeared first on Secu…
Vulnerabilities
CVE-2022-26332
by National Vulnerability Database •
Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field.
Europe, Global IT News
ANZ combines digital and retail divisions ahead of ANZ Plus launch
by Latest news •
Maile Carnegie has been appointed to head up the bank’s combined Australian retail business.
Global Security News, North America
CyberCube partners with Duck Creek Technologies to offer automated cyber risk evaluation
by Industry News •
CyberCube announced that it has partnered with Duck Creek Technologies to streamline the underwriting of cyber insurance policies. The partnership will see the integration of CyberCube’s Risk Scoring Analytics application programming interface (API) in…