SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Kiwi Stories

Global Stories

Microsoft addresses 59 CVEs including critical zero-day flaws
Cybersecurity

Microsoft addresses 59 CVEs including critical zero-day flaws

Microsoft's Patch Tuesday addresses 59 CVEs, including one critical and three zero-days, with notable exploits in DWM Core and MSHTML surfaces.

By Shannon Williams • 3 min read • Thu, 16th May 2024
Patch Tuesday has revealed 61 vulnerabilities
Software Development

Patch Tuesday has revealed 61 vulnerabilities

Microsoft's May 2024 Patch Tuesday addresses 61 vulnerabilities, including three zero-days. Two critical RCE flaws and browser patches are also highlighted.

By Adam Barnett • 4 min read • Wed, 15th May 2024
Cato Networks reveals insecure protocols widespread in inaugural SASE report
Firewalls

Cato Networks reveals insecure protocols widespread in inaugural SASE report

Cato Networks exposes systemic cybersecurity gaps in inaugural threat report, revealing insecure protocols employed across WAN by all examined organisations.

By Shannon Williams • 3 min read • Wed, 15th May 2024
ForAllSecure unveils AI-powered SBOM tool Mayhem to target real threats
Application Security

ForAllSecure unveils AI-powered SBOM tool Mayhem to target real threats

ForAllSecure reveals new AI-powered tool, Mayhem, a dynamic software bill of materials tool that proactively battles exploitable application vulnerabilities.

By Catherine Knowles • 3 min read • Wed, 8th May 2024
The remote desktop tools most targeted by attackers in the last year
Malware

The remote desktop tools most targeted by attackers in the last year

Virtual Network Computing (VNC) was the most targeted remote desktop tool in the past year, clouds over a new Barracuda data report.

By Jonathan Tanner • 8 min read • Thu, 2nd May 2024
Azul extends Intelligence Cloud to Oracle JDK & all OpenJDK JVMs
DevOps

Azul extends Intelligence Cloud to Oracle JDK & all OpenJDK JVMs

Azul broadens its Intelligence Cloud to all OpenJDK JVMs and Oracle JDK, utilising production Java data to enhance developer productivity and identify vulnerabilities.

By Sean Mitchell • 3 min read • Wed, 1st May 2024
Sevco Security drives resolution of enterprise vulnerabilities
IT Automation

Sevco Security drives resolution of enterprise vulnerabilities

Sevco Security further evolves asset protection by prioritising, automating and validating exposure issues resolution with its upgraded platform, aiding cyber risk management for businesses.

By Catherine Knowles • 3 min read • Wed, 1st May 2024
BeyondTrust's 2024 report reveals top Microsoft vulnerabilities
Advanced Persistent Threat Protection

BeyondTrust's 2024 report reveals top Microsoft vulnerabilities

BeyondTrust's 2024 Microsoft Vulnerabilities Report shows Elevation of Privilege (EoP) dominating the vulnerability class for a fourth year.

By Tom Raynel • 3 min read • Tue, 23rd Apr 2024
Cado Security unmasks Cerber ransomware threat to Confluence servers
Ransomware

Cado Security unmasks Cerber ransomware threat to Confluence servers

Cyber security firm, Cado Security, uncovers revelations about a Linux variant of Cerber ransomware exploiting vulnerabilities in Confluence servers using the CVE-2023-22518 exploit.

By Sean Mitchell • 2 min read • Wed, 17th Apr 2024
Darktrace shifts to proactive AI strategy to combat rising cyber threats
Unified Communications

Darktrace shifts to proactive AI strategy to combat rising cyber threats

In response to rising AI-driven cyber threats, Darktrace is repositioning to a platform-based strategy aimed at better equipping businesses to anticipate and counter these advanced cyber attacks.

By Catherine Knowles • 3 min read • Tue, 9th Apr 2024
Mandiant reveals threats to Ivanti Connect Secure appliances
EduTech

Mandiant reveals threats to Ivanti Connect Secure appliances

Mandiant reveals new findings on threat actors exploiting vulnerabilities in Ivanti Connect Secure appliances, laying bare a disturbing mix of state-linked and profit-driven cyberattacks.

By Tom Raynel • 2 min read • Mon, 8th Apr 2024
BackBox introduces major update to Network Vulnerability Manager
Ransomware

BackBox introduces major update to Network Vulnerability Manager

BackBox enhances network vulnerability management with an update to its Network Vulnerability Manager, allowing organisations to mark mitigated Common Vulnerabilities and Exposures, thus refining their risk scores and optimising remediation efforts.

By Catherine Knowles • 3 min read • Fri, 29th Mar 2024
Why the external attack surface matters: An analysis into APAC-related threat activities
Ransomware

Why the external attack surface matters: An analysis into APAC-related threat activities

An analysis by Rapid7 Labs highlights the importance of the external attack surface in APAC cybersecurity, shedding light on threat activities and how regionally-targeted campaigns are utilised by ransomware actors.

By Robin Long and Raj Samani • 3 min read • Fri, 22nd Mar 2024
BianLian turns to extortion after decryptor released, reveals Avast
Cybersecurity

BianLian turns to extortion after decryptor released, reveals Avast

After Avast releases a BianLian decryptor, the hacking group resorts to extortion-only operations, exploiting vulnerabilities like TeamCity servers, reports GuidePoints.

By Sean Mitchell • 3 min read • Wed, 13th Mar 2024
Akamai boosts App & API Protector with advanced DDoS defences
Customer Experience

Akamai boosts App & API Protector with advanced DDoS defences

Akamai Technologies boosts security with significant upgrades to its App and API Protector, providing advanced DDoS defenses, browser impersonation detection, and improved API security.

By Imee Dequito • 3 min read • Mon, 11th Mar 2024
Akamai enhances API Protector with anti-DDoS & bot detection
Distributed Denial of Service

Akamai enhances API Protector with anti-DDoS & bot detection

Akamai Technologies bolsters App and API Protector with precise DDoS attack mitigation, URL Protection and Browser Impersonation Detection.

By Shannon Williams • 3 min read • Tue, 5th Mar 2024
Coalition predicts 25% surge in cyber vulnerabilities for 2024
Ransomware

Coalition predicts 25% surge in cyber vulnerabilities for 2024

Cyber-insurance provider, Coalition, forecasts a 25% increase in cyber vulnerabilities in 2024, in its just released Cyber Threat Index, warning businesses to prepare for an escalating digital risk landscape.

By Imee Dequito • 3 min read • Mon, 26th Feb 2024

Stories from Other Regions