Common Vulnerabilities and Exposures (CVE) Stories - Page 19

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

New research reveals vicious tactics of ransomware groups

Hackers increasingly target zero-day vulnerabilities and supply chain networks for maximum impact, according to a report by Ivanti.

By Catherine Knowles • 5 min read • Fri, 4th Feb 2022

Supply Chain

Supply chain vulnerability identified in SAP transport system

Supply chain attacks on SAP software distribution process allow internal attackers to intervene undetected, says SecurityBridge. A patch has been released.

By Ryan Morris-Reade • 2 min read • Fri, 21st Jan 2022

Data Analytics

More than 40 billion records exposed in 2021 - research

Ransomware had a monumental impact on organisations in 2021, responsible for approximately 38% of all breaches, and 31% of breaches in APAC.

By Shannon Williams • 3 min read • Fri, 21st Jan 2022

Identity and Access Management

Vulnerabilities pose danger to SonicWall SMA 100 remote access appliances

SonicWall and Australia's ACSC are urging all businesses using SonicWall SMA 100 Series appliances to patch the devices as soon as possible.

By Staff Writer • 3 min read • Thu, 20th Jan 2022

Risk & Compliance

WordPress vulnerabilities more than doubled in 2021

WordPress vulnerabilities have more than doubled in 2021, with 77% of them being exploitable, according to Risk Based Security.

By Shannon Williams • 4 min read • Thu, 13th Jan 2022

Cybersecurity

Ransom DDoS attacks surged in final quarter of 2021 - report

Ransom DDoS attacks increased by 29% YoY and 175% QoQ in the last quarter 2021, according to new research from Cloudfare.

By Shannon Williams • 3 min read • Wed, 12th Jan 2022

Malware

Critical Microsoft Office patch exploited by new malware

Sophos has released details of a novel exploit that bypasses a patch for a critical vulnerability affecting the Microsoft Office file format.

By Shannon Williams • 3 min read • Fri, 24th Dec 2021

Semiconductors

Security flaw identified in smartphone chip used in Android devices

Flaws in smartphone chip used in 37% of world's smartphones could enable eavesdropping or hiding malicious code, says Check Point Research.

By Shannon Williams • 3 min read • Fri, 26th Nov 2021

Privileged Access Management

Vulnerability in Cisco security devices could cause firewalls to fail

Vulnerability in Cisco ASA and Cisco FTD firewalls discovered by Positive Technologies researcher, could lead to denial of service. Install updates.

By Shannon Williams • 3 min read • Wed, 24th Nov 2021

Open source

Claroty and JFrog discover 14 vulnerabilities in Busybox

Team82 and JFrog discover 14 vulnerabilities in the latest version of BusyBox, affecting OT and IoT devices running on Linux.

By Ryan Morris-Reade • 4 min read • Fri, 19th Nov 2021

Cybersecurity

New Microsoft Defender vulnerability should concern every enterprise - expert

Microsoft Defender vulnerability poses significant threat, warns Virsec. With 55 vulnerabilities in total, it is deemed the most concerning by experts.

By Shannon Williams • 3 min read • Mon, 15th Nov 2021

Risk & Compliance

A single source of truth: The future of the construction industry

The COVID-19 pandemic has heightened risk for the construction industry, making software solutions crucial for reducing disputes.

By Tony Simonsen • 6 min read • Wed, 10th Nov 2021

Advanced Persistent Threat Protection

ExtraHop launches decryption support for Microsoft to halt advanced attacks

ExtraHop has expanded decryption support for Microsoft authentication and application protocols, providing high fidelity detection of malicious activity.

By Catherine Knowles • 3 min read • Tue, 9th Nov 2021

Malware

BlackBerry and Okta partner to deliver seamless identity and access capabilities

BlackBerry has announced a new technology integration between Okta's Identity Cloud and BlackBerry Spark unified endpoint management.

By Ryan Morris-Reade • 3 min read • Tue, 9th Nov 2021

Cloud Security

Imperva launches free security assessment service for Amazon RDS

Imperva launches free cloud data security assessment for Amazon RDS databases, allowing teams to quickly identify compliance issues.

By Catherine Knowles • 3 min read • Fri, 29th Oct 2021

Breach Prevention

ATM vulnerabilities open door for attacks - report

Vulnerabilities in Wincor Cineo ATMs allow attackers to bypass encryption and make cash withdrawals, according to researchers.

By Ryan Morris-Reade • 3 min read • Thu, 28th Oct 2021

Malware

Trickbot remains top malware impacting NZ - report

CPR observed a concerning increase of various malware impacting New Zealanders, with 16 additional malware families tied at tenth place for the month.

By Shannon Williams • 5 min read • Mon, 18th Oct 2021