LATEST NEWS
Description: OpenText Documentum Content Server – Privilege Escalation Type: webapps Published: Tue, 17 Oct 2017 00:00:00 +0000 Source: EXPLOIT-DB.COM
Security researcher Mathy Vanhoef publicly disclosed a serious vulnerability in the WPA2 encryption protocol yesterday that affects all devices that use WiFi. While we’ve listed many ways to protect yourself against KRACK, the best…
Yesterday, we learned about KRACK (or Key Reinstallation Attack) – a security flaw in the WPA2 protocol, which could see an adversary break the encryption between a router and a…
Google is launching an “advanced protection program” that aims to offer greater email and account protection to journalists, business leaders, political campaign teams, and other high-risk individuals that may be…
Europe’s General Data Protection Regulation (GDPR) is, by name, just another information security compliance regulation requiring that organizations protect personal data from being stolen by hackers. As such, there should…
In The Wake Of Equifax: 8 Biggest Questions About Modernizing Government’s Approach To Personal Data
We are facing 21st-century threats with 20th-century approaches by the government. It’s time to make some change. Read full news article on Forbes.com
MuleSoft Credentials Vault: Secure Your Data
Why Do Applications Need Security? Security is a very big concern in the IT world. Read full news article on Dzone
KRACK Wi-Fi attack – the rules haven’t changed
Mathy Vanhoef has discovered what may be the biggest vulnerability of the year – a flaw in the WPA2 protocol used to encrypt Wi-Fi communications. In the wrong hands, an…
Report: Microsoft never disclosed a breach of its vulnerability database in 2013
Microsoft’s Redmond campus. (Photo by (Stephen Brashear/Getty Images) Microsoft’s internal database of known software vulnerabilities, which included details of flaws in both its software and software made by others, was…
The Flawed System Behind the Krack Wi-Fi Meltdown
security community scrambled to unpack Krack, a fundamental vulnerability in the ubiquitous, secure Wi-Fi network standard known a WPA2. Though some of the most popular devices are mercifully already protected…
Scary tech that keeps us up at night in 2017
Face it: In our business, it’s always Halloween somewhere, thanks to some data breach or another. Read full news article on ZDNet
Supreme Court Will Hear Case Pitting Microsoft Against DOJ Over Data Privacy
The Supreme Court has agreed to hear a case on whether data concerning foreign individuals stored on foreign servers can be accessed under the auspices of United States law. The…
Trend Micro positioned to take on enterprise security leaders
Integrated security products and end-to-end coverage puts Trend Micro in the right technology discussions. Now the company must work toward market visibility and CISO affinity. Read full news article on…
Google launches “strongest security” opt-in program for high risk users
Google has today launched a free, opt-in program aimed at users who believe their Google accounts — such as Gmail, Drive, YouTube etc — to be at particularly high risk…
Chinese backdoor malware resurfaces after more than a decade
Security researchers have found new sophisticated remote access trojan that has resurfaced after more than a decade after it was first released. The new malware, dubbed “Hacker’s Door” Read full…
CVE-2014-9697 – Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memor …
Vuln ID: CVE-2014-9697 Published: 2017-10-17 14:29:00Z Description: Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and MPU switchover) via a crafted…
Google Just Made Gmail the Most Secure Email Provider on the Planet
Last year, hackers working for the Russian government tricked John Podesta, one of Hillary Clinton’s top advisers, into giving away his Gmail password. Months later, his private emails started appearing…
Google to Offer Stepped-up Security For ‘High Risk’ Users
The US technology titan said anyone with a personal Google account can enroll in the new “advanced protection,” while noting that it will require users to “trade off a bit…
Google offers its strongest ever security with new Advanced Protection Program
As part of Cybersecurity Awareness Month, Google has announced numerous security-related updates including revamped phishing protection. Now the company has also announced what it is referring to as its “strongest…
InfoSec Pros Among Worst Offenders of Employer Snooping
IT security professionals often cross the ethical line when it comes to their employer, with 66% of survey respondents admitting that they seek out and access company information that they…
RSA Takes on Governance and Privacy Challenge
RSA at a RSA Charge 2017 conference today announced that it has combined several products from the RSA Archer Suite with RSA services to specifically address data governance and privacy…
Google Home Mini glitch triggers secret recordings
The privacy glitch that befell Google’s new £49 ($49) Home Mini speaker last week was small but, critics might suggest, still revealing. The trouble started when journalist Artem Russakovskii, who had…
Microsoft Ignite Session Video: Understanding GDPR and the tools in Office 365 and beyond to help meet its requirements
Microsoft Ignite Session: THR2137 The General Data Protection Regulation (GDPR) imposes new obligations on companies and other organizations that offer goods and services to people in the EU or that…
SD Times new digest: Windows 10 Fall Creators Update, Adobe Flash vulnerability, MapR’s Managed Services, and Talend Integration Cloud
FinSpy is typically used by nation states and law enforcement agencies for conducting surveillance on local targets. In this case, the malware is being used on a wide range of…
Are your employees snooping on your corporate network?
A new survey of IT security professionals reveals that 92 percent of respondents say employees at their organizations try to access information that is not necessary for their day-to-day work.…
Want to Learn More About AWS CloudHSM and Hardware Key Management? Register for and Attend this October 25 Tech Talk: “CloudHSM – Secure,
As part of the AWS Online Tech Talks series, AWS will present CloudHSM – Secure, Scalable Key Storage in AWS on Wednesday, October 25. This tech talk will start at…