Security News

Audit Finds Critical Vulnerability in iTerm2 macOS Terminal Emulator
2019-10-09 16:48

A security audit funded by Mozilla has led to the discovery of a critical remote command execution vulnerability in the popular iTerm2 macOS terminal emulator. read more

HITRUST issues guidance for relying on work of internal audit departments  in CSF assessments
2019-09-16 02:15

HITRUST, a leading data protection standards development and certification organization, released updated guidance for placing reliance on the results of previously performed audits, assessments,...

Kubernetes security matures: Inside the project’s first audit
2019-08-12 05:15

Auditing 1.5 million lines of code is a heroic undertaking. With resources provided by the Cloud Native Computing Foundation (CNCF), the Kubernetes Project leadership created the Security Audit...

Pentagon Buys Equipment With Known Vulnerabilities: Audit
2019-08-01 15:33

Report Also Highlights Cybersecurity Concerns About Use of Equipment Made in ChinaThe U.S. Department of Defense has purchased IT gear known to have significant cybersecurity vulnerabilities,...

Audit Finds More Security Vulnerabilities at IRS
2019-07-22 10:18

GAO Makes More Security Recommendations; IRS Now Has 127 Issues to ResolveThe Internal Revenue Services' internal financial reporting systems and IT infrastructure have 14 new security...

New Audit Finds More Security Vulnerabilities at IRS
2019-07-19 18:03

GAO Makes More Security Recommendations; IRS Now Has 127 Issues to ResolveThe Internal Revenue Services' internal financial reporting systems and IT infrastructure have 14 new security...

D-Link must suffer indignity of security audits to settle with the Federal Trade Commission
2019-07-03 16:30

No admission of guilt, but plenty of new rules to follow Taiwanese networking equipment vendor D-Link will have to submit to a decade of product security audits after agreeing to settle a lawsuit...

D-Link Agrees to 10 Years of Security Audits to Settle FTC Charges
2019-07-03 11:33

Taiwanese networking equipment manufacturer D-Link has agreed to implement a "comprehensive software security program" in order to settle a Federal Trade Commission (FTC) lawsuit alleging that the...

NASA's Jet Propulsion Lab a Frequent Hack Victim: Audit
2019-06-21 15:48

Report Outlines 10 Years' Worth of Serious IncidentsHackers have repeatedly stolen valuable data - including launch codes and flight trajectories for spacecraft - from NASA's Jet Propulsion...

Audit Identifies Australian Health Sector Security Weaknesses
2019-05-31 18:18

Many of the Problems Are Also Common in the U.S.Similar to security deficiencies often found in the U.S. healthcare sector, weak security controls and practices are putting Australian patient data...