SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Common Vulnerabilities and Exposures (CVE) Stories - Page 21

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Kaspersky Password Manager could be 'bruteforced in seconds'
Cybersecurity

Kaspersky Password Manager could be 'bruteforced in seconds'

As people and enterprises put their trust in password managers to secure their accounts, even well-built password managers can be fatally flawed.

By Staff Writer • 2 min read • Mon, 12th Jul 2021
SonicWall vulnerability allows attackers to obtain full control of device and underlying OS
Cybersecurity

SonicWall vulnerability allows attackers to obtain full control of device and underlying OS

Positive Technologies reveals critical vulnerability in SonicWall Network Security Manager, allowing authenticated attackers full control.

By Shannon Williams • 3 min read • Wed, 7th Jul 2021
Vulnerabilities discovered in Cisco IT infrastructure deployment solution
Disaster Recovery

Vulnerabilities discovered in Cisco IT infrastructure deployment solution

Researchers at Positive Technologies have discovered three vulnerabilities in Cisco HyperFlex HX that could disrupt enterprise operations.

By Shannon Williams • 2 min read • Wed, 23rd Jun 2021
The most common attack surface trends by company location, size, and industry
Hybrid & Remote Work

The most common attack surface trends by company location, size, and industry

A new report identifies the most common attack surface trends by geography and company size and highlights industries most vulnerable.

By Ryan Morris-Reade • 3 min read • Tue, 22nd Jun 2021
Trickbot takes over from Dridex as most prevalent malware
Malware

Trickbot takes over from Dridex as most prevalent malware

Established Dridex trojan has dropped off altogether after being one of the most popular malwares in recent months amidst a global surge in ransomware.

By Shannon Williams • 5 min read • Fri, 11th Jun 2021
Defence engineering and threat intel — no stone left unturned
Security Information and Event Management

Defence engineering and threat intel — no stone left unturned

Understanding the limitations of defences requires examining how blocking and detection systems leverage cyber threat intelligence.

By Anthony Stitt • 5 min read • Thu, 27th May 2021
Most wanted malware Dridex remains in top position amidst global surge in ransomware attacks
Malware

Most wanted malware Dridex remains in top position amidst global surge in ransomware attacks

The Dridex trojan remains the most prevalent malware, often used in the initial stages of ransomware attacks, says Check Point Research.

By Shannon Williams • 5 min read • Fri, 14th May 2021
A look at the MS Exchange zero-days and how to protect your business
Firewalls

A look at the MS Exchange zero-days and how to protect your business

Every organisationusing Microsoft Exchange must patch their on-premise servers immediately and scan their networks for signs of malicious activity.

By Sara Barker • 3 min read • Thu, 29th Apr 2021
Kaspersky discovers zero-day exploit in Desktop Window Manager
Microsoft

Kaspersky discovers zero-day exploit in Desktop Window Manager

While analysing the CVE-2021-1732 exploit, Kaspersky experts found another such zero-day exploit and reported it to Microsoft.

By Shannon Williams • 3 min read • Mon, 19th Apr 2021
Claroty discovers vulnerabilities in Ovarro TBox RTUs
Manufacturing

Claroty discovers vulnerabilities in Ovarro TBox RTUs

Widespread vulnerabilities have been found in Ovarro's TBox remote terminal units, posing a threat to industrial facilities.

By Staff Writer • 2 min read • Tue, 30th Mar 2021
IoT botnets: Perspectives from a residential router
Malware

IoT botnets: Perspectives from a residential router

Surprisingly, a vast volume of malicious traffic can reach a residential device, writes Radware head of research Daniel Smith.

By Daniel Smith • 4 min read • Tue, 23rd Mar 2021
Almost a third of malware threats previously unknown - HP report
Malware

Almost a third of malware threats previously unknown - HP report

New report reveals that 29% of malware captured was previously unknown due to attackers using packers and obfuscation techniques.

By Shannon Williams • 5 min read • Tue, 23rd Mar 2021
Research reveals increase in critical, low complexity vulnerabilities
IoT Security

Research reveals increase in critical, low complexity vulnerabilities

Critical and low complexity vulnerabilities are on the rise, with over 10,000 logged in 2020, according to a new study by Redscan.

By Shannon Williams • 3 min read • Fri, 19th Feb 2021
2021's Most Wanted: Emotet continues reign as top malware threat
Malware

2021's Most Wanted: Emotet continues reign as top malware threat

The Emotet trojan continues to reign as top malware in January, despite international law enforcement taking control of its infrastructure.

By Shannon Williams • 4 min read • Wed, 17th Feb 2021
Vulnerability disclosures back to expected rates despite COVID-19 disruption
Security vulnerabilities

Vulnerability disclosures back to expected rates despite COVID-19 disruption

Vulnerability disclosures are returning to normal levels, with 2020 on track to surpass 2019, according to a report by Risk Based Security.

By Shannon Williams • 2 min read • Tue, 16th Feb 2021
Sophos unearths origin of prominent cryptominer
Firewalls

Sophos unearths origin of prominent cryptominer

The cryptominer was recently discovered when attackers targeted internet-facing database servers (SQL servers), and the MrbMiner was downloaded and installed.

By Staff Writer • 3 min read • Fri, 22nd Jan 2021
Check Point uncovers live Linux attack, urges users to take action
Open source

Check Point uncovers live Linux attack, urges users to take action

Ongoing cyber attacks targeting Linux systems have been discovered, with users urged to patch their systems immediately, warns Check Point Research.

By Catherine Knowles • 3 min read • Wed, 20th Jan 2021
Sophos named a Numbering Authority in CVE programme
Firewalls

Sophos named a Numbering Authority in CVE programme

Sophos has become a Numbering Authority in the Common Vulnerabilities and Exposures programme, enabling it to assign CVE identification to its own products.

By Nick Forrester • 3 min read • Tue, 19th Jan 2021
22 billion records exposed from breaches in 2020 — report
Virtual Private Networks

22 billion records exposed from breaches in 2020 — report

The research also found that 35% of the breaches recorded by Tenable were caused by ransomware attacks, while 14% of breaches stemmed from email compromises.

By Staff Writer • 3 min read • Fri, 15th Jan 2021