Qualys has unveiled TruRisk Eliminate, a comprehensive remediation solution that extends beyond patching to help organisations further reduce risk. It provides additional innovative remediation methods when patching isn’t feasible. This approach uses patchless patching, targeted isolation, and other mitigation strategies to ensure robust protection. Patch management is a core capabilityRead More…
According to a study by Positive Technologies, vulnerability exploitation has ranked among the top three most popular attack methods on organizations for five years running. In 2022–2023, attackers stole confidential data from over 2,700 companies worldwide, exploiting just one vulnerability.Read More…
ESET researchers have uncovered a crimeware campaign that targeted clients at three Czech banks. The malware used, which ESET has named NGate, has the unique ability to relay data from victims’ payment cards via a malicious app installed on their Android devices, to the attacker’s rooted Android phone.Read More…
Ivanti announced new features for Ivanti Neurons for Patch Management to help expand patch settings configuration to allow for multiple parallel deployment tasks such as regular maintenance, priority updates and zero-day response.Read More…
Arcserve reaffirmed its commitment to its Managed Services Provider partners as it announced updates to ShadowProtect SPX and Image Manager offerings. The updates expand compatibility options and include some of the most requested feature innovations.Read More…
Rapid7 recently announced the launch of its Command Platform, a unified threat exposure, detection, and response platform. Rapid7’s AI-charged Command Platform allows customers to integrate their critical security data to provide a unified view of vulnerabilities,Read More…
CyberArk recently announced that SAP Enterprise Cloud Services (ECS) will implement CyberArk to secure privileged and sensitive access to their cloud services with zero standing privileges, protecting client data and allowing for easier auditing.Read More…
CrowdStrike released the 2024 Threat Hunting Report, highlighting the latest adversary trends, campaigns and tactics based on the frontline intelligence from CrowdStrike’s elite threat hunters and intelligence analysts. The report reveals a rise in nation-state and eCrime adversariesRead More…
ESET Research discovered an uncommon type of phishing campaign targeting mobile users, and analyzed a case observed in the wild that targeted clients of a prominent Czech bank. This technique is noteworthy because it installs a phishing application from a third-party website without the user having to allow third-party appRead More…
Cisco has announced the release of its inaugural State of Industrial Networking report to spotlight the critical priorities of the evolving industrial networking landscape. Once a peripheral concern, operational technology (OT) security has become a mandatory focus for organizations worldwide. The report provides a comprehensive look at the challenges andRead More…
New research by Chainalysis, the blockchain data company, has shown that while the year to date (YTD) flow of crypto funds to legitimate services has reached their highest levels since 2021, aggregate illicit activity over the same period fell by an impressive 19.6%, dropping from US$20.9 billion to US$16.7 billion. “ItRead More…
ESET explains that the widespread IT outages triggered by a faulty CrowdStrike update have put software updates in the spotlight. Here’s why you shouldn’t dread them.Read More…
