News

News

• July 29, 2019 29 Jul'19

  Untangling GDPR fines with Synopsys' Tim Mackey

  Tim Mackey of Synopsys tries to clear up some of the mystery around how GDPR regulators determine the fines levied on companies for major data breaches or privacy violations.

• July 25, 2019 25 Jul'19

  D3 Security's Attackbot integrates Mitre ATT&CK in SOAR 2.0

  With the Mitre ATT&CK framework, D3's SOAR 2.0 platform can identify and map security events, predict the kill chain and trigger automated responses to remediate threats.

• July 24, 2019 24 Jul'19

  Citrix breach blamed on poor password security

  An investigation revealed the password spraying attack that gave malicious actors access to Citrix systems resulted in only some business documents being stolen.

• July 23, 2019 23 Jul'19

  Slide deck brings BlueKeep exploit closer to the wild

  After a description for building a remote BlueKeep exploit is posted on GitHub, experts warn that attacks in the wild are becoming more likely and users need to patch.

• July 23, 2019 23 Jul'19

  Researchers fool Cylance AI antimalware with 'simple' bypass

  Security researchers developed a method to make "pure AI" antimalware products classify malware as benign, but it is unclear what antimalware solutions could be considered "pure AI."

• July 22, 2019 22 Jul'19

  Equifax to pay up to $700 million in data breach settlement

  Under the settlement with the FTC and state attorneys general, Equifax will fork over at least $575 million in civil penalties and provide credit monitoring services to consumers.

• July 19, 2019 19 Jul'19

  Enzoic for Active Directory brings continuous password protection

  Updates to Enzoic for Active Directory include NIST-compliant Continuous Password Protection, checking passwords against a live database of common or vulnerable passwords.

• July 19, 2019 19 Jul'19

  CyberArk brings updates to privileged access security offering

  CyberArk introduces CyberArk Alero to its privileged access management product lineup, in addition to other endpoint management and cloud offering updates.

• July 18, 2019 18 Jul'19

  New ransomware threat takes GandCrab's place

  Researchers released GandCrab master decryption keys, and in the wake of GandCrab's shutdown, a new ransomware threat -- called Sodin or Sodinokibi -- has emerged.

• July 17, 2019 17 Jul'19

  BlueKeep blues: More than 800,000 systems still unpatched

  Despite alerts from Microsoft and the U.S. government, more than 800,000 online systems have yet to patch the Windows RDP vulnerability two months after it was disclosed.

• July 17, 2019 17 Jul'19

  Claroty extends platform to include IoT device security

  Claroty has upgraded Continuous Threat Detection to include support for IoT device security, keeping pace with the proliferation of IoT devices in the enterprise.

• July 17, 2019 17 Jul'19

  E-commerce platforms used for domain spoofing against Best Buy

  Despite efforts to flag spoofed domains imitating Best Buy, the sites are still active on e-commerce platforms like Shopify and GearLaunch, which have not taken them down.

• July 16, 2019 16 Jul'19

  Experts: Facebook fine by FTC should be wake-up call for all

  Facebook will reportedly be hit with a $5 billion fine by the FTC following an investigation into multiple privacy issues, and experts said other enterprises should take note.

• July 12, 2019 12 Jul'19

  Zoom vulnerability reveals privacy issues for users

  Companies and users around the world were impacted by a Zoom conferencing software flaw that could allow threat actors to forcibly join a video call without interaction.

• July 09, 2019 09 Jul'19

  OneLogin Desktop Pro for Windows reduces password load

  By eliminating the need for remote workers to sign into Active Directory to access their network, OneLogin's Desktop Pro for Windows aims to make working remotely easier, according to the vendor.