Security News

McAfee has patched two high-severity vulnerabilities in a component of its McAfee Enterprise product that attackers can use to escalate privileges, including up to SYSTEM. According to McAfee's bulletin, the bugs are in versions prior to 5.7.5 of McAfee Agent, which is used in McAfee Endpoint Security, among other McAfee products. Cnf in a location used by McAfee Agent and thus potentially be able to execute arbitrary code with SYSTEM privileges on a Windows system that has the vulnerable McAfee Agent software installed.

McAfee has patched a security vulnerability discovered in the company's McAfee Agent software for Windows enabling attackers to escalate privileges and execute arbitrary code with SYSTEM privileges. McAfee Agent is a client-side component of McAfee ePolicy Orchestrator that downloads and enforces endpoint policies and deploys antivirus signatures, upgrades, patches, and new products on enterprise endpoints.

Newly combined security outfits McAfee and FireEye have revealed a new name: "Trellix". Readers may find the name familiar, as another tech company used the same name in the 1990s and early 2000s when it offered intranet and web published tools such as Trellix Web.

A consortium of private equity types have stumped up $12bn in cash to acquire what's left of McAfee the company plus another couple of billion to pay off its debts. Another Pwn2Own contest, in which security experts compete for cash prizes by exploiting zero-day vulnerabilities in products, wrapped up on Friday, leaving its successful entrants $1,081,250 better off and vendors with details of 61 flaws to fix.

Q2 fiscal 2021 financial highlights from continuing operations Net revenue was $467 million, reflecting a 22% growth year-over-year. Net Income of $108 million or a net income margin of 23%, as compared to $22 million or a net income margin of 6% in the year ago period.

McAfee announced that MVISION Cloud, part of its secure access service edge offering - MVISION Unified Cloud Edge, now provides enhanced security coverage for Microsoft Dynamics 365, a line of enterprise resource planning and customer relationship management software applications. MVISION Cloud for Dynamics 365 provides an advanced set of security tools that are delivered via API, enabling holistic security controls across Dynamics 365.

McAfee announced MVISION Private Access, an integrated approach to enable granular 'zero trust' access and extend data and threat protection capabilities to private applications hosted across hybrid IT environments. MVISION Private Access disrupts the Zero Trust Network Access market by making data-centricity a core capability of granular "Zero trust" access to private applications, whether in customer data centers, or hosted in private, public or hybrid cloud environments, from any location and device.

McAfee Enterprise and FCN announced they have been awarded a contract from the U.S. Department of Veterans Affairs to provide several cybersecurity solutions. Under the five-year, $281 million contract, VA and the Veterans they serve will be protected by McAfee Enterprise's MVISION Endpoint Security, Data Loss Prevention Endpoint, and MVISION EDR. "As the administration's recent Executive Order on Improving the Nation's Cybersecurity emphasizes, our federal agencies need to move toward cybersecurity that is proactive rather than reactive, and VA is leading the way with these solutions," said Rob Lalumondier, Senior Director of Federal Civilian at McAfee Enterprise.

McAfee and CenturyLink announced that CenturyLink has selected McAfee to provide complete home digital protection for new customers of the company's leased modems. For qualifying CenturyLink consumer and small business customers, innovative protection from McAfee is now available as soon as they plug their modem into the wall and connect to the internet, providing them with strong protection for their internet connected devices.

McAfee announced an extension of its longstanding partnership with Samsung to protect consumers' personal data against online threats. Since 2017, McAfee has provided cross-device security to Samsung PC users worldwide via consumer security by McAfee LiveSafe.