IBM SASE Boosts Zero Trust
IBM has announced a new Secure Access Service Edge (SASE) solution designed to encourage the zero-trust security approach in the enterprise leveraging technology provided through a partnership with cybersecurity firm…
SOPHOS Appliances Vulnerable to RCE
Sophos last year patched a remote code execution flaw affecting the web administration console (WebAdmin) of SG UTM devices. The issue, tracked as CVE-2020-25223, was reported and fixed with the…
Mozi P2P Bots in to Action
Mozi botnet was improved by implementing news capabilities to target network gateways manufactured by Netgear, Huawei, and ZTE says the researchers. Mozi is an IoT botnet that borrows the code from Mirai variants and…
CISCO EOF Router Vulnerable
A critical vulnerability in older Cisco routers will remain unpatched after the company advised that they have reached end-of-life status. The vulnerability is in the Universal Plug-and-Play service in Cisco…
CISCO Vulnerable to SNIcat
Networking equipment vendor Cisco said today that some of its security products fail to detect and stop traffic to malicious servers that abuse a technique called SNIcat to covertly steal…
Fortinet Command Injection Vulnerability
An authenticated attacker could execute arbitrary commands as the root user on the underlying system via the SAML server configuration page. The vulnerability impacts Fortinet FortiWeb versions 6.3.11 and earlier, an authenticated…
Posted incloudsecurity
Google Autonomic Sec Ops
Autonomic Security Operations, represents a “stack of products, integrations, blueprints, technical content, and an accelerator program” help customers leverage Chronicle and Google technology and expertise to advance their SOC and…