Security News > 2021

1Password launched Secrets Automation, a new way to easily secure, manage and orchestrate the rapidly expanding infrastructure secrets required in a modern enterprise. In addition to the new product launch, 1Password also completed the acquisition of SecretHub, a secrets management company that protects nearly 5 million enterprise secrets a month.

Grid.ai announced the general availability of Grid, a new platform that enables researchers and data scientists to train AI models on the cloud at scale, from a laptop with zero code changes. The availability of Grid enables AI researchers, machine learning engineers, and data scientists to do development and training at scale without requiring advanced skills in machine learning engineering or MLOps engineering.

S2C's MDM solution captures and stores waveforms continuously in a dedicated standalone hardware removing the need to consume FPGA memory and provides simultaneous debugging across multi-FPGAs. The newly MDM Pro is enhanced with deeper trace to store up to 64GB of waveforms, faster sampling rate of up to 125MHz, faster bandwidth to support simultaneous debug of up to 8 FPGAs and new features such as dynamic probing to enable readback of internal DFF/BRAM values and advance triggers.

Masergy enhanced its Masergy AIOps feature by applying artificial intelligence and machine learning to optimize Software as a Service applications on global networks. Masergy AIOps is deeply embedded into the network, security, and application layers and was developed using an unprecedented amount of historic data patterns, leveraging the company's 20 years of network and security logs.

SmartBear has integrated TestComplete, its UI test automation tool, with BitBar, its native mobile device cloud. TestComplete users are now able to create a codeless mobile test and then use these tests in BitBar across devices.

Boffins from Vrije Universiteit in Amsterdam and ETH in Zurich have bypassed memory chip defenses to execute a successful browser-based Rowhammer side-channel attack dubbed SMASH. Rowhammer refers to a technique that computer security researchers began to explore around 2014: "Hammering" RAM chips with a series of rapid write operations. Initially, Rowhammer attacks had to be conducted locally, though by 2016 [PDF], the technique had been refined to work remotely using JavaScript in, say, a web browser.

Huntsman Security has unveiled the latest version of its SIEM Cyber Security Analytics solution in both an Enterprise and Managed Security Service Provider release. For the first time, analysts can interact with a live ATT&CK heatmap which enables SOC teams to leverage MITRE ATT&CK intelligence to improve attack data visualisation, and quickly and easily identify attack targets, origins and the security risks faced by their organisation.

OpenText announced the release of OpenText Cloud Editions 21.2. OpenText Cloud Editions empower customers with choice, enabling them to run their software anywhere - off-cloud, in the private cloud, in the public cloud platform of choice, or through cloud API services.

Panasonic announced its modular TOUGHBOOK 55 notebook is now available for the defense industry with an integrated Eclypt Core Encrypted Internal Hard Drive from global communications company, Viasat. The Panasonic TOUGHBOOK 55 sets a new standard for rugged mobile computing with users able to customise their device for different tasks while in the field.

"The two aforementioned WhatsApp vulnerabilities would have made it possible for attackers to remotely collect TLS cryptographic material for TLS 1.3 and TLS 1.2 sessions," researchers from Census Labs said today. "With the TLS secrets at hand, we will demonstrate how a man-in-the-middle attack can lead to the compromise of WhatsApp communications, to remote code execution on the victim device and to the extraction of Noise protocol keys used for end-to-end encryption in user communications."