Common Vulnerabilities and Exposures (CVE) stories - Page 5

RansomEXX ransomware disrupts India's banking services
Wed, 7th Aug 2024
#
malware
#
vpns
#
ransomware
A cyberattack by RansomEXX has disrupted services at around 300 Indian banks, affecting ATMs and UPI transactions. CloudSEK investigates the breach.

Tenable launches new features to boost vulnerability management
Tue, 6th Aug 2024
#
advanced persistent threat protection
#
risk & compliance
#
cybersecurity
Tenable has launched Vulnerability Intelligence and Exposure Response, aiming to revolutionise the USD $16 billion vulnerability management sector.

Organisations urged to take a proactive approach to ransomware threats
Fri, 2nd Aug 2024
#
edutech
#
ransomware
#
devops
With July designated Ransomware Awareness Month, organisations are urged to understand ransomware threats and adopt proactive strategies for better cyber resilience.

BlackBerry reveals new cyber-espionage campaign by SideWinder
Fri, 26th Jul 2024
#
smartphones
#
endpoint protection
#
advanced persistent threat protection
BlackBerry's Threat Research team exposes SideWinder’s new cyber-espionage campaign targeting Indian Ocean and Mediterranean ports, aiming for espionage.

Microsoft's July 2024 Patch Tuesday fixes 142 vulnerabilities, experts weigh in
Thu, 11th Jul 2024
#
advanced persistent threat protection
#
microsoft
#
microsoft office
Microsoft's July 2024 Patch Tuesday update tackles 142 vulnerabilities, including two zero-day and five critical remote code execution flaws, urging prompt user action.

Patch Tuesday has revealed 139 vulnerabilities
Wed, 10th Jul 2024
#
cybersecurity
#
microsoft
#
sharepoint
Microsoft's July 2024 Patch Tuesday reveals 139 vulnerabilities, including two zero-days under active exploitation: Hyper-V's EoP and MSHTML Spoofing.

Qualys launches report to tackle tech debt & cyber risks
Wed, 10th Jul 2024
#
advanced persistent threat protection
#
cto
#
cyber threats
Qualys has launched a no-cost Tech Debt Report to help organisations identify and mitigate cyber risks from outdated technology.

Endor Labs warns of critical vulnerabilities in CocoaPods
Wed, 10th Jul 2024
#
malware
#
supply chain
#
cybersecurity
Endor Labs reveals major security flaws in CocoaPods, threatening apps like Instagram and Uber. Critical CVEs could impact Swift and Objective-C supply chains.

Bitdefender & Netgear report reveals major IoT vulnerabilities
Fri, 28th Jun 2024
#
malware
#
data protection
#
phishing
Bitdefender and Netgear’s new report reveals that 99.3% of IoT attacks exploit known vulnerabilities, highlighting the urgent need for timely updates and robust security measures.

Progress Software patch highlights security vulnerabilities of critical infrastructure
Fri, 28th Jun 2024
#
ransomware
#
advanced persistent threat protection
#
supply chain
Progress Software has addressed a critical authentication flaw in its MOVEit Transfer solution, raising concerns over security in essential infrastructure.

BlackBerry cyber report reveals 3.1 million attacks in Q1 2024
Wed, 26th Jun 2024
#
smartphones
#
malware
#
ransomware
BlackBerry's latest report reveals alarming rise in malware, with 3.1 million cyberattacks thwarted from Jan to Mar 2024—critical infrastructure, especially finance, severely hit.

BlackBerry thwarts 3.1 million cyberattacks in early 2024 report
Wed, 26th Jun 2024
#
smartphones
#
malware
#
ransomware
BlackBerry's Q1 2024 report reveals unprecedented cyber threats, detecting 3.1 million attacks and a 40% rise in new malware, spotlighting surging global cybersecurity tensions.

Trend Micro leads in global vulnerability identification for 2023
Wed, 26th Jun 2024
#
advanced persistent threat protection
#
xdr
#
cybersecurity
Trend Micro identified 60% of the world's vulnerabilities in 2023, playing a crucial role in global cybersecurity, according to Omdia study.

Action1 launches inaugural software vulnerability report for 2024
Thu, 20th Jun 2024
#
virtualisation
#
edge security
#
personal computing devices
Action1's 2024 Software Vulnerability Ratings Report provides CISOs and CIOs with key insights amid NVD delays, highlighting rising exploit rates and the critical need for timely data sharing.

Sevco Security forms partnership with GuidePoint Security
Wed, 19th Jun 2024
#
cybersecurity
#
visibility
#
remediation
Sevco Security and GuidePoint Security have inked a strategic partnership to enhance IT network security with Sevco's Asset Intelligence Platform.

Patch Tuesday has revealed 51 vulnerabilities
Wed, 12th Jun 2024
#
cybersecurity
#
microsoft
#
windows
Microsoft addresses 51 vulnerabilities in June 2024 Patch Tuesday, with one critical RCE for Windows, alongside patches for Office and SharePoint flaws.

WatchGuard report reveals surge in endpoint malware
Fri, 7th Jun 2024
#
malware
#
firewalls
#
ransomware
WatchGuard Technologies' latest report reveals a stark contrast in malware trends: network detections halve, while endpoint attacks soar.

RedTail cryptomining malware exploits new Palo Alto flaw
Mon, 3rd Jun 2024
#
blockchain
#
cybersecurity
#
akamai
Hackers exploiting newly found vulnerability in Palo Alto’s PAN-OS are using RedTail malware to enhance cryptomining operations, raising cybersecurity alarms.

GitHub flaw raises alarm over supply chain security risks
Fri, 24th May 2024
#
supply chain
#
cybersecurity
#
software development
A new vulnerability in GitHub Enterprise Server allowing attackers to bypass authentication has raised alarms over supply chain attacks, urging immediate software updates.

Notes on ThroughTek Kalay Vulnerabilities and Their Impact on the IoT Ecosystem
Thu, 23rd May 2024
#
iot
#
cybersecurity
#
bitdefender
ThroughTek Kalay's platform vulnerabilities affect over 100 million IoT devices, exposing them to potential attacks. Vendors race to patch issues.