Cybersecurity News, Insights and Analysis | SecurityWeek
WEB2 days ago · Event: ICS Cybersecurity Conference. Oct. 21-24, 2024. The leading industrial cybersecurity conference for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity. Register.
Latest News - SecurityWeek
WEB4 days ago · Adobe Patches Critical, Code Execution Flaws in Multiple Products. Patch Tuesday: Adobe releases patches for 28 security vulnerabilities and warned of code execution risks on Windows and macOS platforms. September 10, 2024.
Faster Patching Pace Validates CISA’s KEV Catalog Initiative
WEBSep 22, 2023 · According to CISA, the KEV catalog has helped federal agencies and other enrolled entities significantly accelerate their patching efforts, with mean-time-to-remediate for KEVs being nine days faster compared to that of non-KEVs. For internet-facing issues in the catalog, the remediation was 36 days faster. The purpose of the KEV Catalog, CISA ...
Chrome Update Patches Zero-Day Vulnerabilities Exploited at …
WEBMar 27, 2024 · CVE-2024-2887 is a Type Confusion bug in WebAssembly, exploited on the first day of Pwn2Own by security researcher Manfred Paul, who earned a $42,500 reward for it. Paul also demonstrated Safari and Firefox vulnerabilities at the hacking contest, earning a total of over $200,000 in rewards and winning the competition.
Continuous Updates: Everything You Need to Know About the …
WEBJanuary 8, 2021. A global cyber espionage campaign has resulted in the networks of many organizations around the world becoming compromised after the attackers managed to breach the systems of Texas-based IT management and monitoring solutions provider SolarWinds. Specifically, the attackers compromised the build system for the company’s ...
Google Confirms Sixth Zero-Day Chrome Attack in 2021
WEBRyan Naraine. June 17, 2021. Google’s ongoing struggles with in-the-wild zero-day attacks against its flagship Chrome browser isn’t going away anytime soon. For the sixth time this year, the search giant shipped a Chrome point-update to fix code execution holes that the company says is already being exploited by malicious hackers.
Now LIVE: SecurityWeek Cloud Security Summit, Presented by Palo …
WEBSecurityWeek News. June 15, 2022. Virtual summit and expo will examine methods and strategies for securing cloud, multi-cloud and hybrid cloud environments. SecurityWeek’s 2022 Cloud Security Summit, presented by Palo Alto Networks, is now live! Login now as we kick-off a great day of sessions on all-things cloud security!
Cyberattack Disrupts Microchip Technology Manufacturing …
WEBAugust 21, 2024. US-based semiconductor supplier Microchip Technology (NASDAQ: MCHP) has disclosed a cyberattack that has impacted operations at some of its manufacturing facilities. The company revealed in a regulatory filing on Tuesday that it detected suspicious activity on its IT systems on August 17, and on August 19 it …
SD-WAN: Don't Build a Dead End, Prepare for Future-Proof Secure ...
WEBApr 24, 2024 · SD-WAN must be scalable, stable, secure, and fully operational to serve as a strong base for seamless modernization and progression to SASE. By. Etay Maor. April 24, 2024. A decade ago, SD-WAN emerged as a revolutionary technology. It abstracted away network hardware from its control mechanism, enabling centralized, dynamic management and ...
CISA Warns of Exploited Linux Kernel Vulnerability
WEBMay 31, 2024 · The US cybersecurity agency CISA on Thursday warned organizations that threat actors are actively exploiting a recent vulnerability in the Linux kernel. Tracked as CVE-2024-1086, the bug is described as a use-after-free issue in the ‘netfilter: nf_tables’ component. Its exploitation allows a local attacker to elevate their privileges.