IT Brief UK - Technology news for CIOs & IT decision-makers
United Kingdom

Security vulnerabilities Stories - Page 25

Global Stories

Security vulnerabilities stories

Vulnerabilities pose danger to SonicWall SMA 100 remote access appliances
Identity and Access Management

Vulnerabilities pose danger to SonicWall SMA 100 remote access appliances

SonicWall and Australia's ACSC are urging all businesses using SonicWall SMA 100 Series appliances to patch the devices as soon as possible.

By Staff Writer • 3 min read • Thu, 20th Jan 2022
Gartner explains what security leaders need to know, and do, about Log4j
Malware

Gartner explains what security leaders need to know, and do, about Log4j

Log4j vulnerability prompts urgent action from security leaders. Gartner's Jonathan Care explains risks and steps to take.

By Ryan Morris-Reade • 3 min read • Tue, 28th Dec 2021
A new tool to help the MSP community combat Log4j
Partner Programmes

A new tool to help the MSP community combat Log4j

Datto is encouraging all MSPs to download a free script developed and made available on GitHub for any Remote Monitoring and Management solution.

By Ryan Morris-Reade • 3 min read • Mon, 27th Dec 2021
1 in 10 servers and web apps vulnerable to Log4Shell
DataCentre infrastructure

1 in 10 servers and web apps vulnerable to Log4Shell

Only 70% of organizations have scanned for the Log4Shell vulnerability, leaving 10% of assessed assets vulnerable, warns cybersecurity firm Tenable.

By Ryan Morris-Reade • 2 min read • Mon, 27th Dec 2021
What is Log4J and how does it affect you?
Marketing Technologies

What is Log4J and how does it affect you?

Log4J software bug, aka Log4Shell, sparks concern as it affects various platforms. Norton Labs offers advice on protecting systems and applications.

By Ryan Morris-Reade • 3 min read • Fri, 24th Dec 2021
New threat intelligence from Sophos following the Apache Log4Shell vulnerability
Malware

New threat intelligence from Sophos following the Apache Log4Shell vulnerability

Sophos warns of a surge in cyberattacks exploiting the Apache Log4Shell vulnerability, with attempts exceeding hundreds of thousands so far.

By Ryan Morris-Reade • 4 min read • Wed, 15th Dec 2021
Claroty and JFrog discover 14 vulnerabilities in Busybox
Open source

Claroty and JFrog discover 14 vulnerabilities in Busybox

Team82 and JFrog discover 14 vulnerabilities in the latest version of BusyBox, affecting OT and IoT devices running on Linux.

By Ryan Morris-Reade • 4 min read • Fri, 19th Nov 2021
New Microsoft Defender vulnerability should concern every enterprise - expert
Cybersecurity

New Microsoft Defender vulnerability should concern every enterprise - expert

Microsoft Defender vulnerability poses significant threat, warns Virsec. With 55 vulnerabilities in total, it is deemed the most concerning by experts.

By Shannon Williams • 3 min read • Mon, 15th Nov 2021
API vulnerabilities are a huge target for cyber criminals, report finds
EduTech

API vulnerabilities are a huge target for cyber criminals, report finds

API vulnerabilities pose a significant risk to companies and individuals worldwide, according to new research by Akamai Technologies.

By Catherine Knowles • 3 min read • Thu, 28th Oct 2021
ATM vulnerabilities open door for attacks - report
Breach Prevention

ATM vulnerabilities open door for attacks - report

Vulnerabilities in Wincor Cineo ATMs allow attackers to bypass encryption and make cash withdrawals, according to researchers.

By Ryan Morris-Reade • 3 min read • Thu, 28th Oct 2021
Interview: Invicti's Mark Ralls on the new defining age for web application security
Cybersecurity

Interview: Invicti's Mark Ralls on the new defining age for web application security

Invicti, the cybersecurity firm, has combined web application security expertise from its 2018 merger of Netsparker and Acunetix. .

By Sara Barker • 5 min read • Thu, 30th Sep 2021
Apple urgently patches exploits across several operating systems
Cybersecurity

Apple urgently patches exploits across several operating systems

Apple has urgently released patches for multiple software products due to vulnerabilities that may be linked to the Pegasus spyware.

By Staff Writer • 3 min read • Wed, 15th Sep 2021
Privacy Commissioner John Edwards tipped for top role as UK Information Commissioner
Breach Prevention

Privacy Commissioner John Edwards tipped for top role as UK Information Commissioner

Privacy Commissioner John Edwards named preferred candidate for UK Information Commissioner, pending UK Parliament's decision.

By Sara Barker • 3 min read • Fri, 27th Aug 2021
Severe vulnerabilities in appsec environments taking longer to fix - NTT Security
Application Security

Severe vulnerabilities in appsec environments taking longer to fix - NTT Security

The average time to remediate the most severe vulnerabilities in an organisation's IT infrastructure has now reached 256 days.

By Staff Writer • 3 min read • Wed, 25th Aug 2021
Ivanti tackles today's biggest security threats with RiskSense acquisition
Malware

Ivanti tackles today's biggest security threats with RiskSense acquisition

Ivanti has acquired risk-based vulnerability management specialist RiskSense to enhance its patch management capabilities.

By Catherine Knowles • 3 min read • Wed, 4th Aug 2021
SonicWall vulnerability allows attackers to obtain full control of device and underlying OS
Cybersecurity

SonicWall vulnerability allows attackers to obtain full control of device and underlying OS

Positive Technologies reveals critical vulnerability in SonicWall Network Security Manager, allowing authenticated attackers full control.

By Shannon Williams • 3 min read • Wed, 7th Jul 2021
Video: 10 Minute IT Jams - Runecast co-founder on the company's flagship virtualisation tool
Virtualisation

Video: 10 Minute IT Jams - Runecast co-founder on the company's flagship virtualisation tool

The solution, Runecast Analyzer, provides configuration and security compliance analysis for AWS and Azure cloud, Kubernetes clusters and VMware SDDCs.

By Nick Forrester • 4 min read • Thu, 17th Jun 2021

Stories from Other Regions

Security vulnerabilities stories

Log4j actively exploited, serious complications can occur according to CERT NZ
Marketing Technologies

Log4j actively exploited, serious complications can occur according to CERT NZ

The widely-used java logging library, log4j, has been actively exploited, according to an update from CERT NZ and Catalyst.

By Mitchell Hageman • 2 min read • Mon, 13th Dec 2021