SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Security vulnerabilities Stories - Page 20

Global Stories

Security vulnerabilities stories

Public sector IT teams must adopt a new approach to app security
Application Security

Public sector IT teams must adopt a new approach to app security

Technologists are struggling to manage soaring volumes of emerging cyber threats across an increasingly dynamic and fragmented IT environment.

By Simon Pearce • 5 min read • Tue, 7th Mar 2023
Attackers deploying exploits faster than ever, finds Rapid7
Risk & Compliance

Attackers deploying exploits faster than ever, finds Rapid7

Rapid7 Vulnerability Intelligence Report finds attackers developing and deploying exploits faster, with an 87% increase in first-week exploitation since 2020.

By Gaurav Sharma • 3 min read • Wed, 1st Mar 2023
Cyber vulnerabilities found by internal research teams up 80%
EduTech

Cyber vulnerabilities found by internal research teams up 80%

Cyber-physical system vulnerabilities have decreased by 14% in 2H 2022, while internal research findings have increased by 80%, says a report by Claroty.

By Catherine Knowles • 3 min read • Wed, 15th Feb 2023
Sysdig reveals 87% of Container Images have vulnerabilities
Cloud Security

Sysdig reveals 87% of Container Images have vulnerabilities

The report looks at real-world data to understand how global companies and industries use and secure cloud and container environments. .

By Tom Raynel • 3 min read • Fri, 3rd Feb 2023
Will 2023 be a pivot year for cybersecurity?
Cybersecurity

Will 2023 be a pivot year for cybersecurity?

In the past, mega vulnerabilities happened once a quarter, but this past year we've been dealing with critical vulnerabilities almost weekly in some cases.

By Rob Dooley • 5 min read • Thu, 2nd Feb 2023
China-based threat group targeting public cloud - Radware
Malware

China-based threat group targeting public cloud - Radware

China's 8220 Gang has targeted public cloud environments with a custom-built crypto miner and IRC bot, warns Radware.

By Zach Thompson • 3 min read • Fri, 20th Jan 2023
Trustwave provides new feature for threat hunting platform
Advanced Persistent Threat Protection

Trustwave provides new feature for threat hunting platform

Trustwave has relaunched its Advanced Continual Threat Hunting platform, resulting in a 3x increase in threat findings.

By Zach Thompson • 3 min read • Thu, 19th Jan 2023
Claroty's Team82 finds vulnerabilities in historian server
Breach Prevention

Claroty's Team82 finds vulnerabilities in historian server

Claroty's research team, Team82, has examined the GE Proficy Historian, finding five exploitable vulnerabilities capable of causing damage to the system.

By Zach Thompson • 3 min read • Thu, 19th Jan 2023
Data breach in 2023 to exceed US$5 million/incident: Acronis
Ransomware

Data breach in 2023 to exceed US$5 million/incident: Acronis

Between July and October, Acronis found that the proportion of phishing attacks has risen by 1.3, accounting for 76% of all attacks.

By Gaurav Sharma • 4 min read • Thu, 29th Dec 2022
GreyNoise Intelligence identifies exploitation threats for 2023
Unified Communications

GreyNoise Intelligence identifies exploitation threats for 2023

GreyNoise Intelligence unveils its 2022 Mass Exploitation Report, delving deep into threat detection events from the past year.

By Catherine Knowles • 3 min read • Fri, 23rd Dec 2022
Iran-sponsored group using GitHub to deploy custom malware
Advanced Persistent Threat Protection

Iran-sponsored group using GitHub to deploy custom malware

The Secureworks Counter Threat Unit (CTU) has uncovered a subgroup of Iranian Cobalt Mirage using GitHub to store and deploy malware.

By Zach Thompson • 3 min read • Tue, 13th Dec 2022
Rapid7 unveils new capabilities to simplify CDR at AWS event
Hyperscale

Rapid7 unveils new capabilities to simplify CDR at AWS event

Rapid7 showcases new capabilities at AWS re:Invent 2022 to make cloud detection and response and vulnerability assessments easier.

By Zach Thompson • 3 min read • Thu, 1st Dec 2022
Varonis Systems launches new program through HackerOne
Software-as-a-Service

Varonis Systems launches new program through HackerOne

Data security and analytics pioneer Varonis Systems has launched its public vulnerability disclosure program through HackerOne.

By Zach Thompson • 3 min read • Thu, 1st Dec 2022

Stories from Other Regions

Security vulnerabilities stories

High-profile data leaks in Australia add a new level of urgency to cybersecurity protections
Phishing

High-profile data leaks in Australia add a new level of urgency to cybersecurity protections

Board buy-in essential for reducing cyber attack risk, as recent high-profile breaches highlight vulnerabilities. People-centric approach needed.

By Yvette Lejins • 5 min read • Fri, 24th Feb 2023
The bad password advice you need to leave behind in 2023
Identity and Access Management

The bad password advice you need to leave behind in 2023

For companies to better meet cybersecurity standards, it's time to throw away the bad password advice and take steps to eliminate passwords once and for all.

By Jasson Casey • 5 min read • Wed, 22nd Feb 2023
Service meshes are an emerging way for application teams to implement Zero Trust
Advanced Persistent Threat Protection

Service meshes are an emerging way for application teams to implement Zero Trust

Zero Trust is revolutionizing cybersecurity, treating every component as if it's continuously exposed to potential threats. Implementation varies.

By Ashish Kumar • 5 min read • Thu, 2nd Feb 2023
China-based threat group targeting SE Asia, says Mandiant
Malware

China-based threat group targeting SE Asia, says Mandiant

Identified as UNC4191, this cyber espionage threat leverages USB devices as an initial infection vector, concentrates on the Philippines, and has a China nexus.

By Gaurav Sharma • 3 min read • Fri, 9th Dec 2022
ASX 200 companies on-par with FTSE 350, Fortune 500 - report
Email Security

ASX 200 companies on-par with FTSE 350, Fortune 500 - report

ASX 200 companies have a good security posture, on-par with global counterparts, according to a new report by Rapid7.

By Zach Thompson • 4 min read • Mon, 5th Dec 2022