Security News

New infosec products of the week: August 27, 2021
2021-08-27 06:00

Here's a look at the most interesting product releases from the past week, featuring releases from ARMO, Palo Alto Networks, Guardicore, Radiflow and Ermetic. Palo Alto Networks Cortex XDR 3.0 automates threat detection and investigation across cloud environments.

New infosec products of the week: August 20, 2021
2021-08-20 05:30

The FireEye XDR platform provides native security protections for endpoint, network, email, and cloud with a focus on improving organizations' capabilities for controlling incidents from detection to response. SailPoint Workflows enables customers to automate security tasks with no coding required.

China stops networked vehicle data going offshore under new infosec rules
2021-08-13 06:58

China has drafted new rules required of its autonomous and networked vehicle builders. Data security is front and centre in the rules, with manufacturers required to store data generated by cars - and describing their drivers - within China.

New infosec products of the week: August 13, 2021
2021-08-13 05:45

NETGEAR Armor offers enhanced security and threat detection for the smart connected home. Unlike traditional endpoint antivirus products, NETGEAR Armor is built into the router to monitor activity going to and from the internet, protecting the devices on your network and eliminating the need and cost for multiple security subscriptions or software.

New infosec products of the week: August 6, 2021
2021-08-06 06:20

Here's a look at the most interesting product releases from the past week, featuring releases from McAfee, AppOmni, Satori, SentinelOne, and Optiv Security. The AppOmni SaaS Security Management platform, which offers a full suite of SaaS security posture, protection, and monitoring capabilities, covers the most widely adopted and business-critical SaaS applications on the market including Salesforce, ServiceNow, Microsoft 365, Microsoft Teams, GitHub, Workday, Box, Slack, and Zoom.

SolarWinds urges US judge to toss out crap infosec sueball: We got pwned by actual Russia, give us a break
2021-08-04 15:34

SolarWinds is urging a US federal judge to throw out a lawsuit brought against it by aggrieved shareholders who say they were misled about its security posture in advance of the infamous Russian attack on the business. Financial newswire Reuters reported that the suit was originally filed over allegations that former SolarWinds chief exec Kevin Thompson cut cybersecurity efforts in the hope of driving greater dividends into the pockets of major investors, Silver Lake and Thoma Bravo, who each reportedly held around 40 per cent of SolarWinds' stocks at the time.

New infosec products of the week: July 30, 2021
2021-07-30 06:30

Here's a look at the most interesting product releases from the past week, featuring releases from Ivanti, Stellar Cyber, SpecterOps, Aqua Security, Infinipoint, Acronis, and Neustar. Stellar Cyber announced a major leap to boost security analyst efficiency to identify attacks earlier.

Here's a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies
2021-07-29 06:26

Western cybersecurity agencies have published a list of 30 of the most exploited vulnerabilities abused by hostile foreign states in 2020, urging infosec bods to ensure their networks and deployments are fully patched against them. Number one on the US, UK, and Australia's jointly published [PDF] list was the well-known Citrix arbitrary code execution vuln in Application Delivery Controller, aka Netscaler load-balancer.

'Woefully insufficient': Biden administration's assessment of critical infrastructure infosec protection
2021-07-29 05:15

The Biden administration has issued a National Security Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems to address what it describes as a "Woefully insufficient" security posture. "The Memorandum was accompanied by transcripts of remarks made by a"Senior administration official" who said the edicts are needed because "We have a patchwork of sector-specific statutes that have been adopted piecemeal, typically in response to discrete security threats in particular sectors that gained public attention.

Misconfigured Azure Blob at Raven Hengelsport exposed records of 246,000 anglers – and took months to tackle, claim infosec researchers
2021-07-27 20:49

Dutch fishing supply specialist Raven Hengelsport left details of around 246,000 customers visible to anyone on a misconfigured Microsoft Azure cloud server for months. "Sadly, actually getting Raven, also known as Raven Fishing, to do anything about the issue proved challenging."We immediately tried to get in touch with Raven once we discovered the open database, but did not receive a response from Raven regarding the breach," SafetyDetectives' researchers noted.