The CERT Coordination Center (CERT/CC) has released information on 33 vulnerabilities, known as AMNESIA:33, affecting multiple embedded open-source Transmission Control Protocol/Internet Protocol (TCP/IP) stacks. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
The IoT Cybersecurity Improvement Act has been officially signed into law. The bipartisan legislation, sponsored by Reps. Robin Kelly, D-Ill., and Will Hurd, R-Texas, and Sens. Mark Warner, D-Va., and Cory Gardner, R-Colo., requires that any IoT device purchased with government money meet minimum security standards.
Silicon Valley company FireEye, who is often on the front lines of defending companies and critical infrastructure from cyberattacks, has been breached by hackers.
The boards of directors of G4S have made a recommendation to its shareholders that it accept a cash offer from Atlas UK Bidco Limited, a newly incorporated entity that is indirectly controlled by Allied Universal. Shareholders have not yet voted, however, and other offers could still be made.
CoxHealth’s Public Safety and Security team has added K-9 officers Hugo and Ackley, both registered German Shepherds, who will begin making patrols at Cox South and Cox North in the coming weeks.
Synopsys, Inc. released the report, DevSecOps Practices and Open Source Management in 2020, exploring the strategies that organizations around the world are using to address open source vulnerability management as well as the growing problem of outdated or abandoned open source components in commercial code.
The National Security Agency (NSA) released a Cybersecurity Advisory on Russian state-sponsored actors exploiting CVE-2020-4006, a command-injection vulnerability in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector. The actors were found exploiting this vulnerability to access protected data on affected systems and abuse federated authentication.
Physical threats are rising and increasingly unmanageable, putting unprecedented financial, reputational and liability pressures on business leadership and security teams, according to the “2021 State of Protective Intelligence Report: A Mandate for Proactive Protective Intelligence in the Era of Exponential Physical Security Threats,” a new study commissioned by the Ontic Center for Protective Intelligence.
In a new crowdsourcing competition, the Transportation Security Administration (TSA), NASA Tournament Lab (NTL) and TechConnect Ventures will award a total of $215,000 to winners with ideas for the organization to increase security outcomes and operational capabilities.
Menlo Security recently conducted research to find out how organizations across industries are dealing with the balance between security and user experience.
RSS
