Security vulnerabilities stories - Page 10
APIs become the leading attack vector, cybersecurity research shows
Wed, 28th Feb 2024
#
edutech
#
breach prevention
#
api
Cybersecurity firm Imperva has found that 71% of last year's web traffic was linked to APIs, acting as a major attack vector due to organisations' insufficient visibility, leading to a sharp rise in targeted attacks.
Trend Micro dismantles major ransomware group LockBit
Wed, 28th Feb 2024
#
malware
#
advanced persistent threat protection
#
cybersecurity
Trend Micro collaborates with global law enforcement agents to disrupt major ransomware group, LockBit, responsible for a quarter of 2023's ransomware leaks amounting to billions of dollars.
Jamf report highlights poor cyber hygiene in organisations & individuals
Mon, 26th Feb 2024
#
malware
#
mdm
#
phishing
40% of mobile users and 39% of organisations are vulnerable to cyber threats as they operate devices with known weaknesses, according to Jamf's annual Security 360 report.
Hackuity achieves SOC 2 Type II compliance for data security
Wed, 21st Feb 2024
#
risk & compliance
#
security vulnerabilities
#
data security
Hackuity, the RBVM company, attains SOC 2 Type II compliance, showcasing strong data security and compliance that uphold rigorous American standards, providing customers with enterprise-grade security assurance.
New Barracuda threat report reveals web apps exploitation methods
Tue, 20th Feb 2024
#
firewalls
#
ddos
#
data protection
The Threat Spotlight report by Barracuda Networks reveals a surge in cyberattacks exploiting web application security gaps, with over 18 billion attacks mitigated in 2023.
Armis acquires CTCI, forms AI-powered cybersecurity powerhouse
Thu, 15th Feb 2024
#
ai
#
cybersecurity
#
threat intelligence
Armis acquires AI threat intelligence firm, CTCI, boosting its forecast abilities and creating a powerful new Global Threat Intelligence Service.
Absolute Software offers 90-day free support amid Ivanti vulnerabilities
Mon, 5th Feb 2024
#
cybersecurity
#
security vulnerabilities
#
ivanti
Absolute Software steps up amid Ivanti vulnerabilities, offering 90 days of free product licenses and support to potentially affected organisations for cyber resilience.
Sternum & ChargePoint secure Home Flex against IoT vulnerabilities
Fri, 26th Jan 2024
#
data analytics
#
martech
#
iot
In a bid to combat IoT vulnerabilities, security firm Sternum collaborates with ChargePoint to enhance the protection of ChargePoint Home Flex, following the uncovering of significant security flaws.
SecurityBridge rated a top source for SAP vulnerability discoveries
Wed, 24th Jan 2024
#
edutech
#
software
#
sap
SecurityBridge's Research Lab is lauded by SAP's Security Response Team as a leading source for detecting software issues. This recognises a key role in fortifying international SAP security infrastructure.
Less than 1% vulnerabilities pose highest risk in 2023, finds Qualys
Thu, 18th Jan 2024
#
malware
#
ransomware
#
advanced persistent threat protection
Less than 1% of security vulnerabilities created the highest risks to businesses in 2023, with 97 high-risk vulnerabilities exploited undetected, says Qualys Threat Research Unit report.
Retail theft at self-checkouts doubles, AI poses possible solution
Thu, 18th Jan 2024
#
physical security
#
shopping
#
security vulnerabilities
Surging retail theft via self-checkouts sees cart-based losses doubling in a year, costing the average store over $102k annually, reveals an Everseen report.
Guardio Labs exposes critical vulnerability in Opera browser
Thu, 18th Jan 2024
#
browsers
#
opera
#
dark web
Guardio Labs uncovers a significant zero-day vulnerability in Opera's browser, threatening its 350 million active users; Opera's 'My-Flow' feature enables act of exploitation.
Report highlights growing cyber vulnerabilities, CISO Darren Humphries comments
Wed, 17th Jan 2024
#
supply chain
#
security vulnerabilities
#
report
Critical cyber vulnerabilities are soaring, with 74% of firms struggling to swiftly patch holes, warns Darren Humphries, CISO at technology services provider, Acora.
Semgrep and HackerOne unite to improve code security reviews
Fri, 12th Jan 2024
#
uc
#
advanced persistent threat protection
#
software development
In response to rising cyber threats, Semgrep and HackerOne's PullRequest aim to streamline early vulnerability detection and testing in software development through a new collaborative initiative.
Software security strains under supply chain complexity, Slim.AI reveals
Fri, 5th Jan 2024
#
supply chain
#
ai
#
cybersecurity
Over 40% of firms struggle to tackle vulnerabilities in the rising complexity of software supply chains, despite sizeable resource allocation, says Slim.AI's recent Container Report.
Google Cloud launches tool to detect plaintext credentials for free
Fri, 5th Jan 2024
#
encryption
#
public cloud
#
risk & compliance
Google Cloud launches a secret discovery tool aimed at boosting organisation's security by detecting and monitoring plaintext credentials, part of its no-cost Sensitive Data Protection offering.
iPhone hardware feature exploited in Operation Triangulation
Thu, 4th Jan 2024
#
semiconductors
#
advanced persistent threat protection
#
socs
Kaspersky reveals hackers have utilised a previously unknown iPhone hardware feature to bypass Apple's memory protections.
NEC unveils AI strategy, aims to revolutionise industries with generative AI
Thu, 28th Dec 2023
#
partner programmes
#
ai
#
healthtech
NEC launches a tailored AI solution to revolutionise operations across industries, building on its enhanced large language model.
CybeReady celebrates standout year in security awareness training
Wed, 20th Dec 2023
#
security vulnerabilities
#
emea
#
analyst report
CybeReady has seen exceptional growth over the course of 2023, with significant strides in security awareness training solutions.
Zoom introduces VISS, an innovative approach to vulnerability assessment
Mon, 18th Dec 2023
#
open source
#
digital assessment
#
security vulnerabilities
Zoom unveils Vulnerability Impact Scoring System (VISS), an open-source method set to revolutionise online security.
.