SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

Security vulnerabilities Stories - Page 23

Global Stories

Security vulnerabilities stories

Secure Code Warrior announces Coding Labs innovation
Marketing Technologies

Secure Code Warrior announces Coding Labs innovation

Coding Labs mechanisms allow developers to move from learning to applying secure coding knowledge more efficiently, leading to fewer code vulnerabilities.

By Nadine Rogers • 3 min read • Fri, 23rd Sep 2022
Vectra Protect team finds Microsoft Teams vulnerability
Unified Communications

Vectra Protect team finds Microsoft Teams vulnerability

The Vectra Protect team identified a post-exploitation opportunity in August, allowing malicious actors to steal valid user credentials from Microsoft Teams.

By Zach Thompson • 3 min read • Fri, 23rd Sep 2022
Claroty finds seven vulnerabilities in Dataprobe iBoot-PDU
Internet of Things

Claroty finds seven vulnerabilities in Dataprobe iBoot-PDU

The Claroty research team (Team82) has found seven vulnerabilities in Dataprobe's iBoot-PDU, the company's intelligent power distribution unit product.

By Zach Thompson • 3 min read • Thu, 22nd Sep 2022
Internet of Things vulnerability disclosures grew 57%
Internet of Things

Internet of Things vulnerability disclosures grew 57%

Vulnerability disclosures impacting IoT devices increased by 57% in the first half of 2022 compared to the previous six months.

By Shannon Williams • 4 min read • Fri, 26th Aug 2022
Check Point Research finds vulnerabilities in Xiaomi's mobile payment mechanism
EduTech

Check Point Research finds vulnerabilities in Xiaomi's mobile payment mechanism

Check Point Software uncovers vulnerabilities in Xiaomi's mobile payment system, potentially affecting up to 1 billion users. Fixes have been provided.

By Mitchell Hageman • 3 min read • Thu, 18th Aug 2022
Tenable makes additions to Cloud Security portfolio
DevOps

Tenable makes additions to Cloud Security portfolio

Tenable has announced additions to Tenable Cloud Security that represent the next step in assessing threats related to cloud vulnerabilities.

By Catherine Knowles • 4 min read • Fri, 12th Aug 2022
Flashpoint says vulnerability disclosure 'highly volatile'
EduTech

Flashpoint says vulnerability disclosure 'highly volatile'

The vulnerability disclosure landscape is highly volatile, with unreported vulnerabilities and inaccurate scoring, according to Flashpoint.

By Zach Thompson • 3 min read • Fri, 29th Jul 2022
New study reveals opportunistic behaviour of cyber criminals
Firewalls

New study reveals opportunistic behaviour of cyber criminals

Report reveals heavy use of software vulnerabilities matching opportunistic behaviour of threat actors who search for weak points.

By Catherine Knowles • 4 min read • Fri, 29th Jul 2022
Claroty's Team82 uncovers two vulnerabilities in FileWave's MDM system
Unified Communications

Claroty's Team82 uncovers two vulnerabilities in FileWave's MDM system

Claroty's research arm (Team82) has uncovered and disclosed two critical vulnerabilities in FileWave's Mobile Device Management (MDM) system.

By Mitchell Hageman • 2 min read • Fri, 29th Jul 2022
Rapid7 unveils new capabilities for InsightCloudSec offering
Risk & Compliance

Rapid7 unveils new capabilities for InsightCloudSec offering

Rapid7 enhances InsightCloudSec with layered context capabilities, providing security teams with a consolidated, real-time view of risk signals.

By Zach Thompson • 3 min read • Wed, 27th Jul 2022
Sophos reveals latest tactics of BlackCat ransomware group
Malware

Sophos reveals latest tactics of BlackCat ransomware group

Sophos has revealed that the ransomware gang BlackCat has added Brute Ratel, a pentesting tool, to its arsenal of attack tools.

By Catherine Knowles • 3 min read • Tue, 19th Jul 2022
Zero-day attacks climb as hackers get more sophisticated
Malware

Zero-day attacks climb as hackers get more sophisticated

Hackers are exploiting security vulnerabilities faster than ever before, with the average time to exploitation down from 42 days to just 12 days.

By Caitlin Condon • 5 min read • Mon, 18th Jul 2022
Secureworks reveals new information on BRONZE STARLIGHT threat group
Malware

Secureworks reveals new information on BRONZE STARLIGHT threat group

New research from Secureworks reveals that Chinese threat group BRONZE STARLIGHT is using targeted ransomware as a smokescreen for cyber espionage.

By Staff Writer • 3 min read • Thu, 30th Jun 2022
Forescout reveals top vulnerabilities impacting OT vendors
IoT Security

Forescout reveals top vulnerabilities impacting OT vendors

Forescout's Vedere Labs has disclosed OT: ICEFALL, naming 56 vulnerabilities affecting devices from 10 operational technology vendors.

By Catherine Knowles • 3 min read • Wed, 29th Jun 2022
Sophos uncovers latest cyber attack trends in Playbook report
Firewalls

Sophos uncovers latest cyber attack trends in Playbook report

Research finds that there has been a 36% increase in cyber attack dwell time, with a median intruder dwell time of 15 days in 2021 versus 11 days in 2020.

By Catherine Knowles • 5 min read • Thu, 9th Jun 2022
New Qualys solution enables better vulnerability management
Risk & Compliance

New Qualys solution enables better vulnerability management

The new cloud-based solution gives insights into an organisation's risk posture along with the ability to use drag and drop workflows to orchestrate responses.

By Catherine Knowles • 4 min read • Thu, 9th Jun 2022
Micro Focus unveils Data Center Automation for SaaS delivery
Software-as-a-Service

Micro Focus unveils Data Center Automation for SaaS delivery

MicroFocus has launched Data Center Automation for SaaS delivery, providing cost-effective vulnerability risk and compliance management.

By Zach Thompson • 3 min read • Wed, 8th Jun 2022

Stories from Other Regions

Security vulnerabilities stories

Advent One partners with US vulnerability management company
Advanced Persistent Threat Protection

Advent One partners with US vulnerability management company

Advent One has partnered with New York based vulnerability management company, Vicarius to accentuate cybersecurity detection and response capabilities.

By Catherine Knowles • 3 min read • Tue, 21st Jun 2022