CVE-2022-28219: Proof-of-Concept Published for Unauthenticated RCE in Zoho...
CVE-2022-28219: Proof-of-Concept Published for Unauthenticated RCE in Zoho ManageEngine ADAudit PlusNew information and technical details, including a proof-of-concept have been published for a remote...
View ArticleCybersecurity Snapshot: 6 Things That Matter Right Now
Topics that are top of mind for the week ending July 1 | Cybersecurity budgeting priorities. All you ever wanted to know about ransomware. CISOs weigh best-of-breed vs. platforms. The epidemic of...
View ArticleIntroducing Nessus Expert, Now Built for the Modern Attack Surface
Nessus has long been the undisputed leader in vulnerability assessment. With the introduction of Nessus Expert, you can now protect against new, emerging cyberthreats across cloud infrastructure and...
View ArticleMicrosoft’s July 2022 Patch Tuesday Addresses 84 CVEs (CVE-2022-22047)
Microsoft’s July 2022 Patch Tuesday Addresses 84 CVEs (CVE-2022-22047)Microsoft addresses 84 CVEs in its July 2022 Patch Tuesday release, including four critical flaws and one zero day that has been...
View ArticleSecuring Critical Infrastructure: What We've Learned from Recent Incidents
Learn about well-known vulnerabilities and attacks and how they affected critical infrastructure — from Phone Phreaking to recent ransomware.Cyberattacks against critical infrastructure are on the...
View ArticleCybersecurity Snapshot: 6 Things That Matter Right Now
Topics that are top of mind for the week ending July 15 | Government cybersecurity efforts tripped by technical debt. Neglect SaaS security at your own risk. A ranking of the most dangerous software...
View ArticleBrazen, Unsophisticated and Illogical: Understanding the LAPSUS$ Extortion Group
Having gained the industry’s attention in the first months of 2022, the LAPSUS$ extortion group has largely gone quiet. What can we learn from this extortion group’s story and tactics?In early 2022,...
View ArticleOracle July 2022 Critical Patch Update Addresses 188 CVEs
Oracle July 2022 Critical Patch Update Addresses 188 CVEsOracle addresses 188 CVEs in its third quarterly update of 2022 with 349 patches, including 66 critical updates.BackgroundOn July 19, Oracle...
View ArticleNSTAC Aces Zero Trust Recommendations for Protecting Government Entities
Kudos to the National Security Telecommunications Advisory Committee for its report on boosting zero trust and ID management. As the Biden administration looks to implement its recommendations, a...
View ArticleThe Ransomware Ecosystem: In Pursuit of Fame and Fortune
The Ransomware Ecosystem: In Pursuit of Fame and FortuneThe key players within the ransomware ecosystem, including affiliates and initial access brokers, work together cohesively like a band of...
View ArticleCybersecurity Snapshot: 6 Things That Matter Right Now
Topics that are top of mind for the week ending July 29 | Boost your security awareness program. Why fire drills hurt security teams. A quick temperature check on attack surface management. Protecting...
View ArticleCVE-2022-31656: VMware Patches Several Vulnerabilities in Multiple Products...
CVE-2022-31656: VMware Patches Several Vulnerabilities in Multiple Products (VMSA-2022-0021)VMware has patched another set of serious vulnerabilities across multiple products including VMware Workspace...
View ArticleAnalyzing the Vulnerabilities Associated with the Top Malware Strains of 2021
Analyzing the Vulnerabilities Associated with the Top Malware Strains of 2021International cybersecurity agencies issue a joint alert outlining the top malware strains of 2021. We identified...
View ArticleCybersecurity Snapshot: 6 Things That Matter Right Now
Topics that are top of mind for the week ending Aug. 5 | Don’t take your eye off the Log4j ball. The dangers of unsupported software. Why low MFA adoption is everyone’s problem. Preventing ransomware...
View ArticleMicrosoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)
Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)Microsoft addresses 118 CVEs in its August 2022 Patch Tuesday release, including 17 critical...
View ArticleIntroducing Tenable Cloud Security with Agentless Assessment and Live Results
Tenable’s latest cloud security enhancements unify cloud security posture and vulnerability management with new, 100% API-driven scanning and zero-day detection capabilities.Tenable has helped...
View ArticleAccelerate Vulnerability Detection and Response for AWS with Tenable Cloud...
Learn how to leverage our latest cloud security discovery feature, Tenable.cs Agentless Assessment, to enhance the way you can scan for software vulnerabilities and misconfigurations in the...
View ArticleCybersecurity Snapshot: 6 Things that Matter Right Now
Topics that are top of mind for the week ending Aug. 12 (Black Hat Special Edition) | The Black Hat USA conference returned to Las Vegas this week to celebrate its 25th anniversary, as thousands of...
View ArticleRansomware Preparedness: Why Organizations Should Plan for Ransomware Attacks...
Ransomware Preparedness: Why Organizations Should Plan for Ransomware Like DisastersAs ransomware has cemented itself as one of the biggest cybersecurity threats to companies around the globe, it has...
View ArticleCybersecurity Snapshot: 6 Things That Matter Right Now
Topics that are top of mind for the week ending Aug. 19 | A ransomware defense blueprint for SMBs. Why phishing is getting worse and what to do about it. The government revises its cybersecurity...
View Article