Security News
With people worldwide forced to work from home due to the coronavirus epidemic, NIST and DHS published a series of recommendations on how to ensure that virtual meetings and connections to enterprise networks are protected from prying eyes. The security of virtual meetings might often be an afterthought, but basic precautions can ensure that they don't lead to data breaches or other security incidents, says Jeff Greene, director of the National Cybersecurity Center of Excellence at the National Institute of Standards and Technology.
The most serious of the holes, CVE-2020-3947, is a vulnerability in VMware Workstation and Fusion that can be exploited by a miscreant or malware in a guest VM to gain code execution on the host box via the vmnetdhcp component. "Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service condition of the vmnetdhcp service running on the host machine," VMware said of the bug.
Cynerio announced the addition of the virtual segmentation capability to their platform. The Cynerio platform's new virtual segmentation capability automatically delivers safe and effective policies in a matter of weeks by customizing segmentation policy for every device type, limiting the attack surface, and ensuring clinical services remain intact.
A10 Networks announced it has delivered the industry's highest-performance virtual DDoS defense solution with its software version of the Thunder Threat Protection System solution, vThunder TPS. The enhanced vThunder TPS provides 100 Gbps throughput in a single virtual appliance and can be expanded to 800 Gbps with eight-way clustering. vThunder TPS is compact and efficient, allowing it to be deployed in next-generation mobile edge compute environments, conserving space and power while providing powerful DDoS protection.
The case - essentially a US copyright infringement claim - centers on Apple's allegations that Corellium illegally copied the mobile operating system, and unlawfully made derivative versions by modifying the software to run on Corellium's iPhone hypervisor. While Corellium argued that Apple is trying to crack down on who can rifle through iOS for bugs and exploitable flaws, and snuff out jailbreaking efforts, the iGiant's latest paperwork homes in on its central allegations that Corellium is trying to make a fast buck by ripping off iOS and its bundled apps and user interface - technology that Apple has not licensed to Corellium.
SIOS Technology, the industry pioneer in providing IT Resilience through intelligent application availability, announced that PayGo is using SIOS DataKeeper on Amazon Web Services (AWS) utilizing...
Mavenir, a US-based Network Software Provider and the industry’s only end-to-end cloud-native vendor for CSPs, and Sunwave announce successful integration of Mavenir’s virtual RAN architecture...
Hey, ex-Soviet state-backed threat actors, you watching? Fresh from secretary-general Jens Stoltenberg’s repeated promises to hack back at cyber-attackers, NATO is now preparing to run a...
On the second day of its 2019 VMworld conference, VMware unveiled a series of new and enhanced network and security capabilities for the company’s Virtual Cloud Network offering. read more
Greenbone, a leading provider of vulnerability analysis for IT networks, announced that its portfolio of vulnerability management (VM) products is now available via virtual appliances. Greenbone’s...