Tag: software
-
JFrog and GitHub unveil open source security integrations
Secure software specialist JFrog is working with code development service GitHub to integrate the onboard capabilities of its Software Supply Chain Pl… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366609897/JFrog-and-GitHub-unveil-new-open-source-security-integrations
-
JFrog connects key software supply chain management dots
JFrog ties in with GitHub and Nvidia and ships Runtime Security to offer visibility into software supply chains from source code to production and bac… First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366610120/JFrog-connects-key-software-supply-chain-management-dots
-
Synopsys Software Integrity Group Rebrands as Black Duck A New Era in Application Security
The former Synopsys Software Integrity Group announced today that it has rebranded as Black Duck® Software, Inc. (Black Duck), a newly independent app… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/10/01/synopsys-software-integrity-group-rebrands-as-black-duck-a-new-era-in-application-security
-
iPhone Mirroring Flaw Could Expose Employee Personal Information
A flaw in Apple’s mirroring feature within the iOS 18 and macOS Sequoia software updates compromises personal privacy when used on work Macs, accordin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/iphone-mirroring-flaw-could-expose-employee-personal-information/
-
Ivanti warns of three more CSA zero-days exploited in attacks
American IT software company Ivanti has released security updates to fix three new Cloud Services Appliance (CSA) zero-days tagged as actively exploit… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-warns-of-three-more-csa-zero-days-exploited-in-attacks/
-
NISRichtlinie macht Druck: Veraltete Software auf Geräten erhöht Cyber-Risiko
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/nis-2-richtlinie-druck-veraltet-software-geraeten-erhoehung-cyber-risiko
-
Identitätsmanagement: Keycloak 26 setzt auf persistierende Benutzer-Sessions
Im neuen Release der IAM-Software sind User-Sessions standardmäßig persistierend. Eine Preview für Tracing mit OpenTelemetry dient der erhöhten Observ… First seen on heise.de Jump to article: www.heise.de/news/Identitaetsmanagement-Keycloak-26-setzt-auf-persistierende-Benutzer-Sessions-9963727.html
-
United Airlines leaned on real-time data to recover from the CrowdStrike outage
The airline modernized its technology foundations with better customer experiences in mind. Then, a major software outage underscored the importance o… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/united-airlines-crowdstrike-recovery/728832/
-
NHS IT firm faces £6m fine over medical records hack
Watchdog says Advanced software firm failed to protect data of thousands affected by 2022 ransomware attack in EnglandA software provider faces being … First seen on theguardian.com Jump to article: www.theguardian.com/society/article/2024/aug/07/nhs-it-firm-fine-advanced-software-medical-records-ransomware-attack-hack
-
Critical Apache Avro SDK RCE flaw impacts Java applications
A critical vulnerability in the Apache Avro Java Software Development Kit (SDK) could be exploited to execute arbitrary code on vulnerable instances. … First seen on securityaffairs.com Jump to article: securityaffairs.com/169469/security/apache-avro-java-sdk-critical-flaw.html
-
Veeam stoppt Cyber-Bedrohungen und -Angreifer mit proaktiver Threat-Analyse
Veeam Software gab während dem die Erweiterung der Veeam-Data-Platform um den neuen Veeam-Recon-Scanner bekannt. D… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/10/02/veeam-stoppt-cyber-bedrohungen-und-angreifer-mit-proaktiver-threat-analyse/
-
Exploits beobachtet: CISA warnt Nutzer von Ivanti- und Zimbra-Software
Ein Monate alter Ivanti-Fehler wird nun aktiv von Angreifern ausgenutzt, die Zimbra-Lücke hingegen ist erst wenige Tage alt. Patches sind dringend ang… First seen on heise.de Jump to article: www.heise.de/news/US-Behoerde-CISA-warnt-Kritische-Luecken-bei-Ivanti-und-Zimbra-werden-ausgenutzt-9962629.html
-
Progress Software Releases Patches for 6 Flaws in WhatsUp Gold Patch Now
Progress Software has released another round of updates to address six security flaws in WhatsUp Gold, including two critical vulnerabilities.The issu… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/progress-software-releases-patches-for.html
-
Check Point Software Named a Visionary in 2024 Gartner Magic Quadrant for Endpoint Protection Platforms
Check Point Software Technologies Ltd. has announced that it has been recognised as a Visionary in the 2024 Gartner® Magic Quadrant for Endpoint Prote… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/09/27/check-point-software-named-a-visionary-in-2024-gartner-magic-quadrant-for-endpoint-protection-platforms
-
Check Point Software Completes Cyberint Acquisition
Check Point has today announced the completion of its acquisition of Cyberint Technologies Ltd., an innovative provider of external risk management so… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/10/01/check-point-software-completes-cyberint-acquisition/
-
AlmaLinux vs. Rocky Linux: Comparing Enterprise Linux Distributions
AlmaLinux is backed by CloudLinux, Inc., while Rocky Linux is fully community driven under the Rocky Enterprise Software Foundation. AlmaLinux focuses… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/almalinux-vs-rocky-linux-comparing-enterprise-linux-distributions/
-
FERC Outlines Supply Chain Security Rules for Power Plants
The US Federal Energy Regulatory Commission spelled out what electric utilities should do to protect their software supply chains, as well as their ne… First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/ferc-updates-supply-chain-security-power-plants
-
How Cloud-Based Solutions Are Transforming Software Quality Assurance
Cloud-based solutions are transforming the software quality assurance (QA) industry. As organizations increasingly migrate their development and verif… First seen on hackread.com Jump to article: hackread.com/cloud-solutions-transform-software-quality-assurance/
-
Betrügerische App bei Google-Play stahl Krypto-Währungen aus Wallets
Sicherheitsforscher von Check Point Software Technologies entdecken erneut eine gefälschte Wallet-App und die erste Smartphone-Crypto-Drainer-App über… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/09/30/betruegerische-app-bei-google-play-stahl-krypto-waehrungen-aus-wallets/
-
Monitoring-Software checkmk: Sicherheitslücke ermöglicht 2FA-Umgehung
First seen on heise.de Jump to article: www.heise.de/news/Monitoring-Software-checkmk-Sicherheitsluecke-ermoeglicht-2FA-Umgehung-9950321.html
-
Google removes Kaspersky’s antivirus software from Play Store
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-removes-kasperskys-antivirus-software-from-play-store-disables-developer-accounts/
-
Kaspersky defends force-replacing its security software without users’ explicit consent
First seen on techcrunch.com Jump to article: techcrunch.com/2024/09/26/kaspersky-defends-automatically-force-replacing-its-software-without-users-explicit-consent/
-
Veeam kündigt Integration in die Security-Lösungen von Palo Alto Networks an
Veeam Software gibt eine neue Integration mit Palo Alto Networks bekannt, um Sicherheitsoperationen zu vereinfachen und die Datenresilienz zu stärken…. First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/09/27/veeam-kuendigt-integration-in-die-security-loesungen-von-palo-alto-networks-an/
-
New Perfctl Malware targets Linux servers in cryptomining campaign
perfctl malware targets misconfigured Linux servers to deploy cryptocurrency miners and proxyjacking software in an ongoing campaign. Aqua Nautilus re… First seen on securityaffairs.com Jump to article: securityaffairs.com/169351/malware/perfctl-malware-targets-misconfigured-linux-servers.html
-
Why your password policy should include a custom dictionary wordlist
Utilizing a custom dictionaries helps strengthen your password policies. Learn more from Specops Software about how to build custom dictionaries in yo… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/why-your-password-policy-should-include-a-custom-dictionary-wordlist/
-
U.S. Proposes Ban on Connected Vehicles Using Chinese and Russian Tech
The U.S. Department of Commerce (DoC) said it’s proposing a ban on the import or sale of connected vehicles that integrate software and hardware made … First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/us-proposes-ban-on-connected-vehicles.html
-
Some Kaspersky customers receive surprise forced-update to new antivirus software
First seen on techcrunch.com Jump to article: techcrunch.com/2024/09/23/some-kaspersky-customers-receive-surprise-forced-update-to-new-antivirus-software/
-
Kaspersky Exits U.S., Automatically Replaces Software With UltraAV, Raising Concerns
Antivirus vendor Kaspersky has formally begun pulling back its offerings in the U.S., migrating existing users to UltraAV, effective September 19, 202… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/kaspersky-exits-us-automatically.html
-
The vulnerabilities we uncovered by fuzzing µC/OS protocol stacks
Fuzzing has long been one of our favorite ways to search for security issues or vulnerabilities in software, but when it comes to fuzzing popular syst… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/fuzzing-uc-os-protocol-stacks/
-
CODE ASSESSMENT OF PROTON CHAIN
Proton Blockchain The Payment Blockchain is a software blockchain developed by Metallicus, Inc., based on the foundation of EOSIO which identifies its… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2021/03/02/code-assessment-of-proton-chain/