Vulnerability: Page 19
-
Researchers find vulnerabilities inside multiple virtual event, business platforms
Two of the top five virtual event sites leaked personal information or exposed databases to potential remote code execution.
By David Jones • Feb. 25, 2021 -
Getty Images
FireEye identifies 2 threat activity clusters behind Accellion hack
The security firm has labeled one activity cluster for exploiting the FTA vulnerabilities and the other for extortion.
By Samantha Schwartz • Feb. 23, 2021 -
Water system hack reveals thousands of organizations vulnerable to Window 7 exposure
Critical infrastructure providers and SMBs continue to operate the outdated Microsoft OS without security updates and patches.
By David Jones • Feb. 19, 2021 -
Getty
Organizations running SolarWinds Orion online drops 25% since December: report
A report by RiskRecon shows only 8% of entities operating on the internet actually upgraded to later versions based on SolarWinds security recommendations.
By David Jones • Feb. 12, 2021 -
Open source blind trust the culprit in ethical breach of 35 companies
Microsoft, one of the breached companies, encourages organizations to use controlled scopes, namespaces or prefixes to protect package names.
By Samantha Schwartz • Feb. 10, 2021 -
sestovic via Getty Images
Long-term SolarWinds consequencesSolarWinds fallout turns security eye to Microsoft Office 365
Office 365 has been linked to incidents ranging from points of compromise to the unauthorized email access of government officials.
By David Jones • Feb. 9, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by ismagilov via Getty Images
Long-term SolarWinds consequencesSolarWinds security to-do list post hack
One of the first changes security teams need to make is in how they consider adversaries' capabilities: Always assume the perimeter has been breached.
By Samantha Schwartz • Feb. 5, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by ismagilov via Getty Images
3 severe SolarWinds bugs found, patches available
There is currently no evidence to suggest the vulnerabilities were exploited; they are unrelated to the recent hack, Trustwave found.
By Samantha Schwartz • Updated Feb. 4, 2021 -
Rangel, David. [photograph]. Retrieved from https://unsplash.com/photos/4m7gmLNr3M0.
Cyberattacks cost financial firms $4.7M on average last year: report
Weak endpoints and a lack of policy enforcement are imposing extra costs on companies as home-based workers remain vulnerable.
By David Jones • Jan. 28, 2021 -
Kendall, Industry Dive
Malwarebytes attack linked to SolarWinds' nation-state actors, CEO says
Microsoft notified the cybersecurity firm of a compromise involving Office 365 and Azure consistent with prior nation-state attacks.
By David Jones • Jan. 20, 2021 -
Fotolia
Financial services companies embrace cloud as security concerns grow
Equifax CISO and a study from Nutanix address how investing in cloud security helps to protect sensitive financial data.
By David Jones • Jan. 15, 2021 -
Getty Images
Use enterprise-grade tools for encrypted DNS, the NSA warns
Unless only an enterprise tool is used, businesses will lose some of the control governing DNS usage on their networks.
By Naomi Eide • Jan. 15, 2021 -
Legacy, nameless vulnerabilities are slipping by companies unpatched
Making the distinction between severe and low-priority vulnerabilities is becoming more challenging.
By Samantha Schwartz • Jan. 14, 2021 -
Healthcare industry sitting on ticking time bomb of web application attacks
Healthcare organizations were hit by an average of nearly 500 web application attacks each every month in 2020, according to an Imperva report.
By Samantha Schwartz • Jan. 12, 2021 -
Report: Officials investigating possible role of SolarWinds' vendor in compromise
The investigation is centered around whether JetBrains' software development tools are a conduit for compromise. The company has said it is unaware of the investigation.
By Samantha Schwartz • Jan. 7, 2021 -
SolarWinds attack leads to renewed focus on IT relationships with corporate boards
Corporate governance and cybersecurity experts say IT officials need to clearly and regularly communicate potential risks and liabilities ahead of the next crisis.
By David Jones • Jan. 7, 2021 -
Federal task force says Russia likely actor behind SolarWinds attack
As investigations continue, agencies are working to preserve private-sector trust.
By David Jones , Samantha Schwartz • Jan. 5, 2021 -
Fast-growing gaming industry faces rising threat of account compromise
A report from KELA shows one million compromised accounts and thousands of leaked employee credentials in underground markets.
By David Jones • Jan. 5, 2021 -
Kendall Davis for CIO Dive
Microsoft's latest SolarWinds discovery highlights systemic supply chain weaknesses
Organizations are rushing to mitigate the full extent of the damage from compromise discovered three weeks ago.
By Naomi Eide • Jan. 4, 2021 -
Known vulnerabilities for 2020 already surpassed 2019's total
IT teams are often responsible for deploying the patches security teams deem most critical. When patches are missed, it could render even unassuming DOC or RTF files dangerous.
By Samantha Schwartz • Dec. 18, 2020 -
Carson Masterson / Unsplash
After years in the lab, IBM ready to take homomorphic encryption into the mainstream
Increased use of hybrid cloud and a successful pilot program help build the case for processing highly-encrypted data in transit.
By David Jones • Dec. 18, 2020 -
Getty
FireEye killswitch stops SolarWinds hack
After identifying the supply chain attack against SolarWinds, the security firm partnered with Microsoft and GoDaddy to block malware from further operation.
By David Jones • Dec. 16, 2020 -
Permission granted by University of Maryland School of Medicine
COVID-19 vaccine supply chain has cyberthreats hidden in plain sight
Outdated systems throughout vaccine distribution logistics carry unprecedented cyberthreats.
By Samantha Schwartz • Dec. 16, 2020 -
Traitov/iStock/Getty via Getty Images
SolarWinds Orion vulnerability: What security teams need to know
As SolarWinds and investigators seek answers on the extent of the Orion vulnerability's impact, experts say the attack raises broader questions about readiness.
By David Jones • Dec. 15, 2020 -
Former Goldman Sachs exec joins Google Cloud as CISO
In his role, Phil Venables will oversee risk within the Google Cloud business and secure customer migrations.
By Samantha Schwartz • Dec. 15, 2020
Previous
