Security Newswire

RSS

Blumira research team has discovered an alternative attack vector in the Log4j vulnerability that relies on a basic Javascript WebSocket connection to trigger the RCE locally via drive-by compromise.

The Department of Homeland Security has awarded Rutgers University a grant to conduct research into threat detection and mitigation at "soft targets" like schools, stadiums and other public venues.

Let's look at how to get the most out of your Product Security Incident Response Team (PSIRT) investment.

As retailers prepare for one of the busiest times of the year, let’s discuss some of the challenges and priorities to consider now to manage the evolving cybersecurity landscape ahead of the holidays.

Luxembourg Airport will increase security at their border control system by adding a pre-registration option, mobile screening and biometric identity management. Read more about the entry-exit system from Veridos in this case study.

As many have seen, the Log4Shell vulnerability, which was discovered over the weekend, is an extremely serious flaw and will likely impact organizations for years to come. Here’s what we know thus far, and how enterprises can remain safe as this vulnerability persists.
 

Cloud migration, occupancy tracking and video analytics are all top-of-mind technologies for security leaders looking forward to 2022, according to year-end predictions from Genetec.

Albert King, the Chief Data Officer of the Scottish Government, discussed the key aspects involved in Scotland's artificial intelligence (AI) strategy in a session of Cognilytica's AI in Government speaker series. The country prioritizes data as a means to improve decision-making and enable national goals.

Cybersecurity leaders are concerned that attackers could further weaponize the Log4j security vulnerability by creating a "worm" that spreads automatically from one vulnerable device to another. 

A Vulcan Cyber study highlights the struggle of IT security teams to transition from simple vulnerability identification to meaningful response and mitigation, limiting the risk insights business leaders and IT management professionals need to effectively protect valuable business assets.