VMware has released patches that address important and critical vulnerabilities affecting the company’s vSphere Data Protection (VDP) and ESXi products.
The critical flaw was discovered by Marc Ströbel (phroxvs) of HvS-Consulting in VDP, a piece of software designed for creating image-level backups of virtual machines, virtual servers and databases.
read more
Google Releases Crypto Library Testing Tool
Google this week announced the availability of Project Wycheproof, an open source tool designed for finding known vulnerabilities in popular cryptographic software libraries.
read more
Rapid7 Appointed CVE Numbering Authority
Rapid7 has been designated as a Common Vulnerability and Exposures (CVE) Numbering Authority (CNA), which enables the security firm to assign CVE identifiers to flaws acknowledged by affected vendors.
read more
Cybercriminals Make Millions With Ad Fraud Bot Farm
Russian cybercriminals can earn up to $5 million per day through a massive ad fraud operation powered by a bot farm that uses hundreds of servers and more than 500,000 IP addresses, online fraud detection firm White Ops reported on Tuesday.
read more
Cybereason Unveils Free Ransomware Protection Tool
Cybereason Makes Free Behavioral-Based Ransomware Protection Tool Available for Windows
read more
Organizations in the Dark as Most Networks Actively Breached: Analysis
Twenty Organizations Were Analyzed in a Recent Study; All 20 Were Already Unknowingly Compromised
read more
Facebook Ready to Retire SHA-1
One year after saying that certificates using the SHA-1 hash algorithm should be kept alive in older browsers, Facebook is finally ready to retire the insecure cryptographic hash function and move to strong
read more
Panasonic In-Flight Entertainment Systems Can Be Hacked: Researcher
read more
Continue readingThe Danger of Miscommunication Between Security and DevOps
Miscommunications Between Security Teams and DevOps Teams Put Your Business at Risk
read more
“Shadow Brokers” Data Obtained From Insider: Flashpoint
New evidence uncovered by researchers after the group calling itself “Shadow Brokers” made available some new files reinforces the theory that the exploits and tools were obtained from a rogue insider and not by hacking NSA systems.
read more
