Security vulnerabilities stories - Page 4

ThroughTek Kalay's platform vulnerabilities affect over 100 million IoT devices, exposing them to potential attacks. Vendors race to patch issues.

A Claroty study reveals that 13% of operational technology assets have insecure internet connections and 36% have known exploited vulnerabilities, posing severe cybersecurity risks.

GitLab has announced cutting-edge AI-driven updates to its DevSecOps platform, including Duo Enterprise and CI/CD catalog, promising enhanced security and efficiency.

Australian businesses grapple with security vulnerabilities due to rising cloud complexity, leading to increased cyber threats and corporate survival issues.

Radware excels in GigaOm's 2024 AAS Security Report, gaining recognition as the only vendor to score top marks for AI-based vulnerability detection and bot management.

Semperis bolsters partnership with Veritas Technologies, enhancing cyber resilience against ransomware threats by using advanced attack-path analysis methods, streamlining data protection methods.

Cyber security firm Claroty exposes a critical flaw in current vulnerability management strategies, revealing a colossal 38% of the riskiest cyber-physical system (CPS) assets go undetected by conventional methods.

ForAllSecure reveals new AI-powered tool, Mayhem, a dynamic software bill of materials tool that proactively battles exploitable application vulnerabilities.

Qualys unveils CyberSecurity Asset Management 3.0, enhancing its External Attack Surface Management solution, reducing false positives by 60% and uncovering 34% more assets in an initiative to tackle hidden cyber risk.

NetSPI unveils a unified security platform featuring AI and automation to help businesses tackle exposure risk and security vulnerabilities proactively amid rising ransomware threats.

Businesses rethink traditional cybersecurity practices, moving towards platform security amid findings suggesting additional benefits such as cost efficiency and improved attack response. Experts advise due diligence.

Sysdig unveils AI Workload Security to provide real-time cloud risk assessment, boosting visibility in AI infrastructures for swift response to threats and aiding regulatory compliance.

Sevco Security further evolves asset protection by prioritising, automating and validating exposure issues resolution with its upgraded platform, aiding cyber risk management for businesses.

Backslash Security reveals security oversights tied to AI-generated code in their recent GPT-4 developer simulation exercise, shedding light on unexpected vulnerabilities introduced by third-party open-source software.

Cloud-native access control solutions provider, Portnox, is launching a private bug-bounty scheme in collaboration with Bugcrowd, incentivising white-hat hackers to identify security vulnerabilities for financial rewards.

Open source flaws threaten to destabilise the development of new web innovations, such as Web 3.0 and the metaverse, according to a survey by global content management system provider, Forrit.

Beyond the CVE addresses how neglecting device misconfigurations can exacerbate vulnerabilities and risk breaches, demanding constant scrutiny and remediation.

Despite progress in perimeter security, the focus has shifted to private cloud networks, where insider threats prove costly.

BeyondTrust's 2024 Microsoft Vulnerabilities Report shows Elevation of Privilege (EoP) dominating the vulnerability class for a fourth year.

Cyber security firm, Cado Security, uncovers revelations about a Linux variant of Cerber ransomware exploiting vulnerabilities in Confluence servers using the CVE-2023-22518 exploit.