Security CERT Global
- CISA Adds One Known Exploited Vulnerability to Catalog
- Ubuntu Security Update
- Mageia Security Update
- Oracle Linux Security Update
- SUSE Security Update
- HP Security Update
- Foxit Security Update
- OpenSSL Security Update
- DebianOS Security Update
- Dell Security Update
- Chrome Security Update
- CVE-2023-32318 (nextcloud_server)
- CERTFR-2023-AVI-0430 : Multiples vulnérabilités dans Stormshield Network Security (02 juin 2023)
- CERTFR-2023-AVI-0428 : Multiples vulnérabilités dans les produits Splunk (02 juin 2023)
- CERTFR-2023-AVI-0429 : Multiples vulnérabilités dans le noyau Linux d’Ubuntu (02 juin 2023)
- CERTFR-2023-AVI-0431 : Vulnérabilité dans le noyau Linux de RedHat (02 juin 2023)
- CERT-SE:s veckobrev v.22
- 0-klik-hackangreb mod iOS-brugere
- ESB-2023.3151 - [Win][UNIX/Linux] Splunk Enterprise and Cloud Platform: CVSS (Max): 8.8
- ESB-2023.3147 - [Win][UNIX/Linux] Splunk App: CVSS (Max): 4.7
- ESB-2023.3148 - [Win][UNIX/Linux] Splunk Enterprise and Cloud Platform: CVSS (Max): 4.8
- ESB-2023.3152 - [Win][UNIX/Linux] Google Chrome: CVSS (Max): 8.8*
- ESB-2023.3149 - [Win][UNIX/Linux] Splunk App for Stream: CVSS (Max): 7.8
- ESB-2023.3143 - [Win][UNIX/Linux] Splunk Enterprise: CVSS (Max): 9.8*
- ESB-2023.3153 - [SUSE] kubernetes1.18: CVSS (Max): None
- ESB-2023.3146 - [Win][UNIX/Linux] Universal Forwarders: CVSS (Max): 9.8
- ESB-2023.3150 - [Win][UNIX/Linux] Splunk Enterprise and Cloud Platform : CVSS (Max): 7.2
- ESB-2023.3145 - [Win][UNIX/Linux] Splunk App: CVSS (Max): 8.1
- ESB-2023.3144 - [Win][UNIX/Linux] Splunk Enterprise and Cloud Platform: CVSS (Max): 4.3
- ESB-2023.3131 - [SUSE] openssl-1_1: CVSS (Max): 6.5
- ESB-2023.3134 - Splunk EnterpriseCVSS (Max): 5.4
- ESB-2023.3141 - [Win][UNIX/Linux] Splunk Enterprise and Cloud Platform: CVSS (Max): 4.3
- ESB-2023.3132 - [SUSE] ImageMagick: CVSS (Max): 3.3
- ESB-2023.3138 - [Appliance] Advantech WebAccess/SCADA: CVSS (Max): 7.2
- ESB-2023.3133 - [Debian] cups: CVSS (Max): 5.9
- ESB-2023.3139 - netatalk: CVSS (Max): 9.8
- ESB-2023.3140 - [Win][UNIX/Linux] Splunk Enterprise: CVSS (Max): 3.4
- ESB-2023.3136 - [Win][Linux] Splunk Cloud: CVSS (Max): None
- ESB-2023.3130 - [SUSE] ImageMagick: CVSS (Max): 7.5
- ESB-2023.3135 - [Win][UNIX/Linux] Splunk Enterprise and Cloud Platform: CVSS (Max): 6.5
- ESB-2023.3142 - [Win][UNIX/Linux] Splunk Enterprise and Cloud Platform: CVSS (Max): 7.7
- ESB-2023.3129 - [SUSE] openssl-1_1: CVSS (Max): 6.5
- ESB-2023.3137 - [Appliance] HID Global SAFE: CVSS (Max): 7.3
MGS+ ICS Security Report August 2017
MG Strategy+ ICS Security Report August 2017: Editor Picks: News Intelligence Alerts Reports
Financial malware more than twice as prevalent as ransomware
Three Trojans dominated the financial threat landscape in 2016 and attackers increased their focus on corporate finance departments
The Jetson’s Cyber Concerns – Future Smart Cities Cybersecurity Checklist
As cities continue to grow smarter, they will also become easier to hack. With millions (if not billions) of dollars going into research for urban domains and the Internet of Things (IoT), there will be more opportunities to utilize technology to define, access and improve smart city services and infrastructure. In these smart cities, information security plays a huge role in protecting the highest levels of confidentiality, availability and integrity for city resources and utilities.
The Future of Ransomware
Ransomware isn’t new, but it’s increasingly popular and profitable.
Rethinking Vulnerabilities: Network Infrastructure as a Software System
Increasing complexity is putting networks at risk. It’s time to shift our security approach and take some lessons from software development.
Over 8,600 Security Flaws Found in Pacemaker Systems
Security researchers from WhiteScope have uncovered over 8,600 vulnerabilities in pacemaker systems and the third-party libraries used to power various of their components.
How the FBI relies on dark web intel firms as frontline investigators
Using Physics to Protect Industrial Devices Against Hacking
Ransomware: Best Practices for Prevention and Response
Machine Learning in Cybersecurity
Critical Asset Identification (Part 1 of 20: CERT Best Practices to Mitigate Insider Threats Series)
The first practice described in the newly released edition of the Common Sense Guide to Mitigating Insider Threats is Practice 1: Know and Protect Your Critical Assets. In this post, I discuss the importance and nature of this practice, which is a cornerstone of shaping and scoping a robust insider threat program.
Jacobs to Acquire CH2M to Create Premier $15 Billion Global Solutions Provider
Google to Achieve “Supremacy” in Quantum Computing by the End of 2017
In theory, quantum computers could be vastly superior to regular or “classical” computers in performing certain kinds of tasks, but it’s been hard to build one. Already a leader in this field, Google is now testing its most powerful quantum chip yet, a 20-qubit processor, which the company looks to more than double in power to 49 qubits by the end of 2017.
THE HIGH COST OF DARK ENDPOINTS; Do you know where all of your endpoints are and what they are running?
THE CYBER-COMMITTED CEO; Three industry-leading practices help CISOs catalyze engagement with their CEO and board to make cybersecurity business-relevant.
VULNERABILITY IN INDUSTRIAL CONTROL SOFTWARE AND QUALITY OF THE PATCH MANAGEMENT
What’s now and next in analytics, AI, and automation
Innovations in digitization, analytics, artificial intelligence, and automation are creating performance and productivity opportunities for business and the economy, even as they reshape employment and the future of work.
Cyber raises threat against America’s energy backbone
UN Report Shows the Whole World Needs a Cybersecurity Upgrade
Major cyber-readiness gaps remain among nations, but nearly all countries need major improvements.
Half of all countries aware but lacking national plan on cybersecurity, UN agency reports
Only about half of all countries have a cybersecurity strategy or are in the process of developing one, the United Nations telecommunications agency today reported, urging more countries to consider national policies to protect against cybercrime. Releasing its second Global Cybersecurity Index (GCI), the International Telecommunication Union (ITU) said about 38 per cent of countries have a published cybersecurity strategy and an additional 12 per cent of governments are in the process of developing one.
UN finds cybersecurity is a struggle worldwide
There are massive gaps in security among the 134 countries surveyed, including the world’s most powerful nations.
How Cisco is establishing itself as a cybersecurity leader
Cisco demonstrated its commitment to cybersecurity at its annual customer event. Good position, but lots of work ahead.
Average time to plug SCADA holes is 150 days, says report
90% of Companies Get Attacked with Three-Year-Old Vulnerabilities
A Fortinet report released this week highlights the importance of keeping secure systems up to date, or at least a few cycles off the main release, albeit this is not recommended, but better than leaving systems unpatched for years.
Cybersecurity remains a growing problem
Learn the lessons or pay the price
Tsunami of DDoS-for-Hire Platforms Coming From the East
Over the past six months, a large number of DDoS-for-hire platforms — also known as DDoS booters or DDoS stressors — have appeared in China, all sporting the same interface, and seeming to be based on the same source code.
THE BIGGEST CYBERSECURITY DISASTERS OF 2017 SO FAR
Major IIoT Challenges in 2017
Steps for Creating National CSIRTs
How Industrial IoT Startups Will Disrupt the Incumbents
Cybersecurity spend: ROI Is the wrong metric
Executives and board members should instead focus on network defender first principles.