Top

Category: Security


Security

Docker re-fixes a critical authorization bypass vulnerability

July 25, 2024

Via: CSO Online

Open source containerization platform Docker has urged users to patch a critical vulnerability affecting certain versions of the Docker Engine that allows privilege escalation using specially crafted API requests. Tagged as CVE-2024-41110, the vulnerability was first discovered in 2018 and […]


Security

CrowdStrike blames testing shortcomings for Windows meltdown

July 24, 2024

Via: CSO Online

CrowdStrike has blamed a hole in its testing software for the release of a defective content update that hobbled millions of Windows computers worldwide on Friday, July 19. The hole caused CrowdStrike’s Content Validator tool to miss a flaw in […]


Security

Where and How Do WAN, SD-WAN, and SASE Fit In?

July 18, 2024

Via: Network Computing

Just where and how WAN (wide area network), SD-WAN (software-defined wide area network), and SASE (Secure Access Service Edge) fit is an almost universal question today for many company network planners. If you don’t have SD-WAN or SASE, which is […]


Security

Ransomware attackers exploit year-old backup vulnerability

July 12, 2024

Via: CSO Online

Security intelligence firm Group-IB reports that attackers from a recently created ransomware group – EstateRansomware – exploited a year old vulnerability (CVE-2023-27532) in backup software from Veeam as part of a complex attack chain. Anatomy of an attack EstateRansomware exploited […]


Security

Evolve data breach impacted upward of 7.64 million consumers

July 10, 2024

Via: CSO Online

The number of persons affected by a recent data breach at Evolve Bank & Trust exceeds 7.64 million, a document submitted to the Office of the Maine Attorney General this week by the law firm representing the financial services organization […]


Security

We’re in the Unified SASE Era. What’s next?

July 9, 2024

Via: Network World

Network security is one of the largest sectors of the cybersecurity market today. As with any technology, network security has undergone several evolutions over the past couple of decades, especially as new features have been added or consolidated into a […]


Security

Fake network traffic is on the rise — here’s how to counter it

July 9, 2024

Via: CSO Online

The ability to effectively analyze network traffic is a must for a successful enterprise cybersecurity program, as it’s critical to identifying and defending against many types of attacks. That message isn’t lost on CISOs, with the use of network traffic […]


Security

Legacy systems are the Achilles’ heel of critical infrastructure cybersecurity

July 8, 2024

Via: CSO Online

Rare is the element of critical infrastructure ecosystem that doesn’t contain legacy systems declared at end of life (EOL) or outdated and unsupported software or operating systems. Any CISO in charge of safeguarding said infrastructure should aspire to know and […]


Security

OpenAI failed to report a major data breach in 2023

July 8, 2024

Via: CSO Online

A previously unreported security breach at OpenAI, the developer of ChatGPT, has raised alarms over the potential of foreign adversaries, such as China, accessing sensitive AI technologies. While the hacker did not access the core code, the incident that took […]


Security

How AI Can Improve Network Security

July 5, 2024

Via: Network Computing

Network managers are about to add a powerful new security technology to their toolbox: artificial intelligence. AI promises the ability to analyze vast volumes of data without having a human around, says Shing-hon Lau, senior AI security researcher at Carnegie […]


Security

Cyberattackers are using more new malware, attacking critical infrastructure

June 28, 2024

Via: CSO Online

Security teams are in for an increasingly busy year as the number of attacks and the amount of new malware increase, according to BlackBerry’s latest Global Threat Intelligence Report, released Tuesday. Almost two-thirds (60%) of the attacks detected by BlackBerry […]


Security

NetApp receives AAA rating for its AI ransomware detection

June 26, 2024

Via: Data Centre & Network News

NetApp, the intelligent data infrastructure company, today announced that NetApp ONTAP Autonomous Ransomware Protection with Artificial Intelligence (ARP/AI) has received a AAA rating from SE Labs, an independently-owned and run testing company that assesses security products and services. SE Labs […]


Security

Cloud security faces pressure from AI growth, multicloud use

June 25, 2024

Via: CSO Online

There is a growing sense of urgency surrounding cloud security as IT professionals deal with complex new threats and increasing cyberattacks targeted towards cloud resources, Thales Inc’s 2024 Cloud Security Study said. With the demands of AI integration across products, […]


Security

Understanding APIs and how attackers abuse them to steal data

June 24, 2024

Via: CSO Online

Simply put, APIs (short for application programming interface) are how machines, cloud workloads, automation and other non-human entities communicate with one another. They also represent an access point to highly sensitive company data and services. Almost every organization uses these […]


Security

Why identity security Is essential to cybersecurity strategy

June 24, 2024

Via: CSO Online

In the modern digital landscape, cybersecurity isn’t just a technical challenge – it’s a business imperative. At the heart of cybersecurity is identity security – the principle that the right people have the right access at the right time. As […]


Security

Securing networks in the age of AI (Reader Forum)

June 21, 2024

Via: RCR Wireless News

The digital era is hurtling towards a hyper-connected future fueled by advancements like 5G and the looming promise of 6G. While these next-generation networks unlock a treasure trove of possibilities – from the ubiquitous Internet of Things (IoT) to smart […]


Security

Is it time to split the CISO role?

June 19, 2024

Via: CSO Online

Cybersecurity has gained a lot of space and attention in recent years and with that attention came legislations, regulations and a lot more scrutiny. One of the results of this is that CISOs have now more responsibilities that go beyond […]


Security

Ransomware, zero-day exploits keep network security pros scrambling

June 14, 2024

Via: Network World

The networks that enable today’s hyper-distributed enterprises face persistent and emerging security challenges. One of those challenges is ransomware. While it’s not a new problem, “attacks are getting more and more sophisticated,” said Neil Anderson, vice president of cloud, infrastructure […]


Security

A CISO game plan for cloud security

June 13, 2024

Via: CSO Online

As businesses increasingly migrate to the cloud, chief information security officers (CISOs) face numerous critical challenges in ensuring robust cloud security. Don’t believe me? Experts highlighted this at the recent Gartner Security & Risk Management Summit. Gartner projects a significant […]


Security

11 times the US government got hacked in 2023

June 13, 2024

Via: CSO Online

Poor patch management, unsupported systems, and inadequate authentication controls have left some US federal government systems open to hackers, resulting in 11 major incidents in the fiscal year to September 30, 2023, according to a new report from the US […]