Tag: software
-
Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)
Progress Software has fixed a critical vulnerability (CVE-2024-6327) in its Telerik Report Server solution and is urging users to upgrade as soon as p… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/26/cve-2024-6327/
-
CrowdStrike Outage Could Cost Cyber Insurers $1.5 Billion
Most Claims Will Be Made Under ‘Systems Failure’ Coverage, Says Moody’s Ratings. The global IT outage triggered by a faulty CrowdStrike software updat… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/crowdstrike-outage-could-cost-cyber-insurers-15-billion-a-25870
-
Post-CrowdStrike, Microsoft to discourage use of kernel drivers by security software
First seen on theregister.com Jump to article: www.theregister.com/2024/07/29/microsoft_crowdstrike_incident_report/
-
Progress Software fixed critical RCE CVE-2024-6327 in the Telerik Report Server
Progress Software addressed a critical remote code execution vulnerability, tracked as CVE-2024-6327, in the Telerik Report Server. Telerik Report Ser… First seen on securityaffairs.com Jump to article: securityaffairs.com/166168/security/telerik-report-server-cve-2024-6327.html
-
Under-Resourced Maintainers Pose Risk to Africa’s Open Source Push
Many nations see open source software as a great equalizer, giving the Global South the tools necessary for sustainable development. But recent supply… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/under-resourced-maintainers-pose-risk-to-africas-open-source-push
-
Spyware Users Exposed in Major Data Breach
Plus: The Heritage Foundation gets hacked over Project 2025, a car dealership software provider seems to have paid $25 million to a ransomware gang, a… First seen on wired.com Jump to article: www.wired.com/story/spyware-users-exposed-data-breach/
-
Sicherheitslücke mit Höchstwertung in Cisco Smart Software Manager On-Prem
First seen on heise.de Jump to article: www.heise.de/news/Angreifer-koennen-Passwoerter-von-Cisco-Smart-Software-Manager-On-Prem-aendern-9804585.html
-
Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads
Software supply chain security startup Chainguard raises a $140 million Series C round that values the company at $1.2 billion. The post Chainguard Ra… First seen on securityweek.com Jump to article: www.securityweek.com/chainguard-raises-140-million-expands-tech-to-secure-ai-workloads/
-
BIND 9.20 released: Enhanced DNSSEC support, application infrastructure improvements
BIND (Berkeley Internet Name Domain) is an open-source DNS software system with an authoritative server, a recursive resolver, and related utilities. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/25/bind-9-20-released-enhanced-dnssec-support/
-
CrowdStrike-Analyse: Wieso eine leere Datei zum BlueSceen führte
Am gestrigen 19. Juli 2024 führte ein fehlerhaftes Update der CrowdStrike Falcon EDR-Software konkret einer Datei für einen Treiber dazu, dass weltwei… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/20/crowdstrike-analyse-wie-so-eine-leere-datei-zum-bluesceen-fhrte/
-
NVIDIA patches flaw in Jetson software used in AI-powered systems
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/nvidia-patches-flaw-in-jetson-software-used-in-ai-powered-systems
-
CrowdStrike veröffentlicht Untersuchungsbericht und bleibt Antworten schuldig
Ein Blogartikel zum fehlerhaften Update beim Falcon Sensor erläutert haarklein den Testprozess der Software nicht aber den der fatalen Regel-Aktualisi… First seen on heise.de Jump to article: www.heise.de/news/CrowdStrike-veroeffentlicht-Untersuchungsbericht-und-bleibt-Antworten-schuldig-9811796.html
-
Progress warns of critical RCE bug in Telerik Report Server
Progress Software has warned customers to patch a critical remote code execution security flaw in the Telerik Report Server that can be used to compro… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/progress-warns-of-critical-rce-bug-in-telerik-report-server/
-
Shane Buckley on How Gigamon Responded to CrowdStrike Outage
Observability and Defense-in-Depth Strategies in Focus After Faulty Software Update. Shane Buckley, CEO of Gigamon, discusses the recent CrowdStrike o… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/shane-buckley-on-how-gigamon-responded-to-crowdstrike-outage-a-25863
-
Networking Equipment Riddled With Software Supply Chain Risks
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/networking-equipment-riddled-with-software-supply-chain-risks/
-
Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager
Cisco has released patches to address a maximum-severity security flaw impacting Smart Software Manager On-Prem (Cisco SSM On-Prem) that could enable … First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/cisco-warns-of-critical-flaw-affecting.html
-
KnowBe4 mistakenly hires North Korean hacker, faces infostealer attack
American cybersecurity company KnowBe4 says a person it recently hired as a Principal Software Engineer turned out to be a North Korean state actor wh… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/knowbe4-mistakenly-hires-north-korean-hacker-faces-infostealer-attack/
-
First Annual OSCR Report Reveals 95% of Organizations Have at Least One Severe Security Risk Within their Software Supply Chain
OX Security, the pioneer in Active Application Security Posture Management (Active ASPM), today issued the OSC&R community’s inaugural software su… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/07/17/first-annual-oscr-report-reveals-95-of-organizations-have-at-least-one-severe-security-risk-within-their-software-supply-chain
-
A Guide to Open Source Software
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/a-guide-to-open-source-software/
-
CrowdStrike blames buggy testing software for disastrous update
A bug in the Content Validator a software element CrowdStrike relies on for testing and validating Rapid Response Content updates for its Falcon Senso… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/24/crowdstrike-update-testing/
-
CrowdStrike software update at the root of a massive global IT outage
<p>A defective software update led to major disruptions in aviation, banking and other industries as Microsoft 365 services were impacted worldw… First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/crowdstrike-microsoft-global-IT-outage/721874/
-
Software Maker MCG Health Settles Data Breach Suit for $8.8M
Litigation Alleges Vendor Took 2 Years to Discover Data Theft After Hack. Software vendor MCG Health has agreed to pay $8.8 million to settle a consol… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/software-maker-mcg-health-settles-data-breach-suit-for-88m-a-25851
-
SSH-Snake Tool Used in Data Exfiltration Attacks
A new threat actor is finding success in relying on open-source software (OSS) security tools and a networking mapping tool called SSH-Snake in its ca… First seen on duo.com Jump to article: duo.com/decipher/ssh-snake-tool-used-in-data-exfiltration-attacks
-
Check Point Snags Team8’s Nadav Zafrir to Replace Gil Shwed
Check Point’s 2nd CEO Since 1993 Arrives With Deep CISO Relationships, Sales Acumen. Check Point Software tapped the longtime leader of an Israeli cyb… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/check-point-snags-team8s-nadav-zafrir-to-replace-gil-shwed-a-25841
-
Hamster Kombat’s 250 million players targeted in malware attacks
Threat actors are taking advantage of the massive popularity of the Hamster Kombat game, targeting players with fake Android and Windows software that… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hamster-kombats-250-million-players-targeted-in-android-windows-malware-attacks/
-
Lessons Learned from the CrowdStrike Incident: Strengthening Organizational Resilience
On July 19, 2024, a major global digital catastrophe unfolded as a faulty Windows update led by cybersecurity firm CrowdStrike’s Falcon software cause… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/lessons-learned-from-the-crowdstrike-incident-strengthening-organizational-resilience/
-
KnowBe4 Unknowingly Hired Fake North Korean IT Worker
Cybersecurity company KnowBe4 unknowingly hired a North Korean operative who used a stolen identity and an AI-enhanced photo to get the software engin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/knowbe4-unknowingly-hires-fake-north-korean-it-worker/
-
Vulnerability In Cisco Smart Software Manager Lets Attacker Change Any User Password
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36121/Vulnerability-In-Cisco-Smart-Software-Manager-Lets-Attacker-Change-Any-User-Password.html
-
CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to its Kn… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/cisa-warns-of-actively-exploited-rce.html
-
Confidential AI: Enabling secure processing of sensitive data
In this Help Net Security interview, Anand Pashupathy, VP GM, Security Software Services Division at Intel, explains how Intel’s approach to confident… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/23/anand-pashupathy-intel-ai-data-protection/