Security vulnerabilities stories - Page 8

Microsoft's September Patch Tuesday addresses 79 vulnerabilities, including four critical RCEs and bugs with in-the-wild exploitation. Surprisingly, no browser patches yet.

Opus Security unveils its AI-powered Advanced Multi-Layered Prioritization Engine, revolutionising how organisations manage and address vulnerabilities.

HackerOne has unveiled PartnerOne, a new channel partner programme designed to broaden access to its innovative cybersecurity solutions globally.

Revenera launches OSS Inspector for IntelliJ IDEA, helping developers identify open source software risks directly in their IDE, ensuring secure, compliant code.

Tenable unveils new features in Tenable Nessus, enhancing risk prioritisation with EPSS and CVSS v4 for improved vulnerability management and compliance.

GitLab unveils GitLab Duo Enterprise at USD $39 per user/month, offering AI-driven enhancements for secure, efficient software development to Ultimate customers.

Akamai's data shows a surge in cyber threats aimed at the gaming industry in 2024, with bot activity, web attacks, and DDoS attacks reaching record highs.

Capital.com has unveiled a public bug bounty programme on Intigriti, inviting ethical hackers to enhance its cybersecurity and protect user data.

Microsoft's August Patch Tuesday fixes 88 vulnerabilities, with evidence of in-the-wild exploitation and public disclosure for 10 of them.

Security experts underscore the importance of immediate remediation for vulnerabilities to mitigate risks and protect organisational assets.

Tenable releases new Vulnerability Intelligence and Exposure Response tools to aid IT and cloud environments in prioritising and addressing critical security threats.

Elastic Security Labs has uncovered serious security vulnerabilities in Microsoft's Smart App Control and SmartScreen, posing risks of undetected cyber attacks.

SentinelOne unveils advanced generative AI features for its Singularity Platform, enhancing threat prevention and response, with innovations like the AI-powered Purple AI analyst.

Almost 40% of systems tested by Picus Security are vulnerable to complete takeover, with macOS being notably weaker in stopping cyber-attacks.

AttackIQ launches Mission Control, enhancing Enterprise Breach and Attack Simulation for distributed teams. The new feature aims to streamline security testing and improve ROI.

ShinyHunters claimed responsibility for compromising 33 million Twilio users' phone numbers via the Authy 2FA app, sparking major security concerns.

Microsoft's July 2024 Patch Tuesday reveals 139 vulnerabilities, including two zero-days under active exploitation: Hyper-V's EoP and MSHTML Spoofing.

Endor Labs reveals major security flaws in CocoaPods, threatening apps like Instagram and Uber. Critical CVEs could impact Swift and Objective-C supply chains.

With tech giants grappling with data breaches and security flaws, experts stress the urgent need for multifactor authentication and stronger identity security to protect against rising cyber threats.

NTT DATA's 2024 Infrastructure Lifecycle Management Report finds 80% of global firms hindered by outdated tech. ANZ leads with 100% of executives reporting impaired business agility due to legacy systems.