SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

Common Vulnerabilities and Exposures (CVE) Stories - Page 13

UK Stories

Common Vulnerabilities and Exposures (CVE) stories

Winter Vivern exploits webmail server vulnerability targets European governments
Surveillance

Winter Vivern exploits webmail server vulnerability targets European governments

Winter Vivern cyber group targets European governments using XSS vulnerability of Roundcube Webmail server, as ESET researchers have discovered.

By Catherine Knowles • 3 min read • Wed, 1st Nov 2023

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Operation Triangulation: Undocumented iPhone hardware feature exposed
DevOps

Operation Triangulation: Undocumented iPhone hardware feature exposed

Kaspersky's GReAT team has uncovered an undisclosed iPhone hardware feature used in Operation Triangulation attacks.

By Shannon Williams • 3 min read • Thu, 28th Dec 2023
Beware the lasting legacy of the Log4j vulnerability
Application Security

Beware the lasting legacy of the Log4j vulnerability

Efforts to mitigate the Log4j vulnerability involve updating to patched versions of Log4j, but the process continues to be complex.

By Erin Stephan • 6 min read • Mon, 18th Dec 2023
Claroty Team82 discovers cybersecurity threats to industrial automation systems
Data Analytics

Claroty Team82 discovers cybersecurity threats to industrial automation systems

Team82 at Claroty uncovers substantial cybersecurity vulnerabilities in Operational Technology protocol clients, showing potential for full system control.

By Sean Mitchell • 2 min read • Thu, 14th Dec 2023
Aqua Security on how to navigate the Cloud's complexities
DevOps

Aqua Security on how to navigate the Cloud's complexities

With all the benefits the cloud has to offer, it also introduces a new set of challenges, particularly for industries where security and compliance are priorities.

By Kristen Nolan • 5 min read • Fri, 8th Dec 2023
OpenSSF announces new members & secure software development principles
Advanced Persistent Threat Protection

OpenSSF announces new members & secure software development principles

OpenSSF introduces new members including Patchstack and SparkFabrik, and outlines secure software development principles.

By Sean Mitchell • 2 min read • Tue, 5th Dec 2023
Rising cybersecurity threats prompt shift from traditional password methods
Multi-factor authentication

Rising cybersecurity threats prompt shift from traditional password methods

Rising cybersecurity threats prompt a shift from traditional, vulnerable password methods to phishing-resistant authentication solutions.

By Sean Mitchell • 3 min read • Mon, 27th Nov 2023
Check Point reveals rise of NJRat & AgentTesla in cyber threat landscape
Endpoint Protection

Check Point reveals rise of NJRat & AgentTesla in cyber threat landscape

Check Point's latest Global Threat Index exposes a surge in Remote Access Trojan NJRat and an AgentTesla campaign.

By Catherine Knowles • 3 min read • Thu, 9th Nov 2023
Action1 set to boost enterprise IT security with automated remediation workflows
Customer Experience

Action1 set to boost enterprise IT security with automated remediation workflows

Action1 Corp. is releasing an enterprise IT security solution integrating automated vulnerability remediation workflows.

By Catherine Knowles • 3 min read • Mon, 6th Nov 2023
CAST unveils autumn release of software intelligence product
Public Cloud

CAST unveils autumn release of software intelligence product

CAST has launched their autumn release of software intelligence product, CAST Highlight, designed to enhance cloud migration and optimisation.

By Sean Mitchell • 2 min read • Fri, 27th Oct 2023
First Azul State of Java survey reveals Java's crucial role in tech industry
Private Cloud

First Azul State of Java survey reveals Java's crucial role in tech industry

Azul's inaugural State of Java survey highlights Java's vital role in global tech, with 98% of firms reporting usage.

By Sean Mitchell • 3 min read • Wed, 25th Oct 2023
BackBox introduces Network Vulnerability Manager for organised risk assessment
Advanced Persistent Threat Protection

BackBox introduces Network Vulnerability Manager for organised risk assessment

BackBox launches Network Vulnerability Manager, a tool for automated risk assessment and efficient remediation.

By Imee Dequito • 3 min read • Mon, 23rd Oct 2023
Hackuity launches Version 2.0 of next gen vulnerability management
Marketing Technologies

Hackuity launches Version 2.0 of next gen vulnerability management

Hackuity, the risk-based vulnerability management provider, has launched Version 2.0 of its platform with major enhancements to support risk prioritisation.

By Catherine Knowles • 3 min read • Fri, 13th Oct 2023
Security Journey unveils role-specific learning paths for software security
Application Security

Security Journey unveils role-specific learning paths for software security

Security Journey unveils tailored secure coding courses aimed at enhancing software security and regulatory compliance.

By Imee Dequito • 3 min read • Thu, 12th Oct 2023
Keeper Security with first in joining the CVE programme
DevOps

Keeper Security with first in joining the CVE programme

Keeper Security, a leader in password management, has become the first company in its field to join the CVE programme as a CNA.

By Sean Mitchell • 2 min read • Fri, 6th Oct 2023
Severe 'Looney Tunables' security flaw found in some Linux editions
Cybersecurity

Severe 'Looney Tunables' security flaw found in some Linux editions

Major security flaw, 'Looney Tunables', detected in glibc, threatens Linux distributions, urgent patch recommended.

By Sean Mitchell • 2 min read • Wed, 4th Oct 2023
Keysight and Synopsys partner for IoT device cybersecurity
IoT Security

Keysight and Synopsys partner for IoT device cybersecurity

Synopsys Defensics fuzz testing software is now embedded into Keysight's IoT Security Assessment solution, which reduces costs while speeding up time-to-market.

By Gaurav Sharma • 3 min read • Fri, 29th Sep 2023
Recorded Future discloses new high-risk vulnerabilities
Risk & Compliance

Recorded Future discloses new high-risk vulnerabilities

Recorded Future's monthly report reveals high-risk vulnerabilities, exploit chains, and zero-day vulnerabilities affecting Microsoft and Ivanti products.

By Catherine Knowles • 2 min read • Tue, 19th Sep 2023