SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Common Vulnerabilities and Exposures (CVE) Stories - Page 22

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Sophos unearths origin of prominent cryptominer
Firewalls

Sophos unearths origin of prominent cryptominer

The cryptominer was recently discovered when attackers targeted internet-facing database servers (SQL servers), and the MrbMiner was downloaded and installed.

By Staff Writer • 3 min read • Fri, 22nd Jan 2021
Check Point uncovers live Linux attack, urges users to take action
Open source

Check Point uncovers live Linux attack, urges users to take action

Ongoing cyber attacks targeting Linux systems have been discovered, with users urged to patch their systems immediately, warns Check Point Research.

By Catherine Knowles • 3 min read • Wed, 20th Jan 2021
Sophos named a Numbering Authority in CVE programme
Firewalls

Sophos named a Numbering Authority in CVE programme

Sophos has become a Numbering Authority in the Common Vulnerabilities and Exposures programme, enabling it to assign CVE identification to its own products.

By Nick Forrester • 3 min read • Tue, 19th Jan 2021
22 billion records exposed from breaches in 2020 — report
Virtual Private Networks

22 billion records exposed from breaches in 2020 — report

The research also found that 35% of the breaches recorded by Tenable were caused by ransomware attacks, while 14% of breaches stemmed from email compromises.

By Staff Writer • 3 min read • Fri, 15th Jan 2021
Emotet remains leading malware in global threat index
Malware

Emotet remains leading malware in global threat index

The malware has impacted 7% of organisations globally, following a spam campaign which targeted more than 100,000 users per day during the holiday season.

By Shannon Williams • 4 min read • Mon, 11th Jan 2021
GitHub hosts more than 56 million developers in 2020
Marketing Technologies

GitHub hosts more than 56 million developers in 2020

GitHub's 2020 State of the Octoverse report reveals the latest trends in developer activity, including top languages and security vulnerabilities.

By Staff Writer • 3 min read • Mon, 7th Dec 2020
Claroty finds four vulnerabilities in Schneider Electric OT device
DataCentre infrastructure

Claroty finds four vulnerabilities in Schneider Electric OT device

Unmitigated vulnerabilities could give an attacker access to the device, enabling the attacker to break encryption, modify code, and run certain commands.

By Staff Writer • 3 min read • Thu, 19th Nov 2020
2020's most wanted malware: Trickbot and Emotet trojans driving spike in ransomware attacks
Malware

2020's most wanted malware: Trickbot and Emotet trojans driving spike in ransomware attacks

Trickbot and Emotet are being used to distribute ransomware against hospitals globally, according to research from Check Point.

By Shannon Williams • 4 min read • Tue, 10th Nov 2020
Securing SAP to ensure better operational security
Cybersecurity

Securing SAP to ensure better operational security

Australian government warns of growing cybercrime threat; organisations' intellectual property and financial information at risk.

By Cameron Sherrard • 2 min read • Thu, 8th Oct 2020
McAfee finds vulnerabilities in 'temi' the videoconferencing robot
Robotics

McAfee finds vulnerabilities in 'temi' the videoconferencing robot

Temi is commonly used in environments including businesses, healthcare, retail, hospitality, and other environments including the home.

By Staff Writer • 3 min read • Tue, 22nd Sep 2020
Malware and email scams targeting employees spread rapidly in Q2
Malware

Malware and email scams targeting employees spread rapidly in Q2

Malware exploiting a decade-old Microsoft Office vulnerability has surged by 400%, according to a study by NordVPN.

By Catherine Knowles • 3 min read • Fri, 18th Sep 2020
OT networks warned of vulnerabilities in CodeMeter software
Internet of Things

OT networks warned of vulnerabilities in CodeMeter software

Manufacturers using Wibu-Systems CodeMeter are urged to update to version 7.10 due to vulnerabilities that could allow attackers to take control of OT networks.

By Staff Writer • 3 min read • Wed, 16th Sep 2020
Ripple20 threat has potential for 'vast exploitation', ExtraHop researchers find
Advanced Persistent Threat Protection

Ripple20 threat has potential for 'vast exploitation', ExtraHop researchers find

One in three IT environments vulnerable to Ripple20 cyber threat, says ExtraHop. Attackers can exploit 19 vulnerabilities in the Treck networking stack.

By Catherine Knowles • 3 min read • Tue, 15th Sep 2020
Ripple20 threat could affect 35% of all IT environments – ExtraHop
Advanced Persistent Threat Protection

Ripple20 threat could affect 35% of all IT environments – ExtraHop

The vulnerabilities have the potential to 'ripple' through complex software supply chains, enabling attackers to steal data or execute code.

By Staff Writer • 2 min read • Mon, 14th Sep 2020
COVID-19 related email threats pose huge risk in 2020
Advanced Persistent Threat Protection

COVID-19 related email threats pose huge risk in 2020

According to the company's annual mid-year roundup report, Trend Micro blocked 8.8 million COVID-19 related threats, nearly 92% of which were email-based.

By Catherine Knowles • 3 min read • Mon, 31st Aug 2020
Cyber threats on the rise for industrial control systems, new research finds
Advanced Persistent Threat Protection

Cyber threats on the rise for industrial control systems, new research finds

Industrial control system (ICS) vulnerabilities are increasing due to remote access, says a report by The Claroty Research Team.

By Catherine Knowles • 3 min read • Tue, 25th Aug 2020
Kaspersky finds zero-day exploits in Windows OS and Internet Explorer used in targeted attack
Cybersecurity

Kaspersky finds zero-day exploits in Windows OS and Internet Explorer used in targeted attack

Kaspersky uncovers zero-day exploits in Windows OS and Internet Explorer used in targeted attack, prompting security patches.

By Shannon Williams • 2 min read • Tue, 18th Aug 2020
42% more plaintext HTTP servers than HTTPS counterparts - report
Virtual Private Networks

42% more plaintext HTTP servers than HTTPS counterparts - report

Rapid7 has released a report detailing the changing internet risk landscapes of 2020, and other issues facing cybersecurity teams.

By Staff Writer • 3 min read • Wed, 5th Aug 2020
VPN vulnerabilities pose serious risk to OT Networks
Virtual Private Networks

VPN vulnerabilities pose serious risk to OT Networks

Vulnerable VPN servers and clients used in critical industries have been discovered by cybersecurity firm Claroty, potentially leading to security breaches.

By Staff Writer • 2 min read • Thu, 30th Jul 2020