Vulnerabilities Patched By Big OEMs a Review- Year 2022
This post details the cumulative patches released by some of the larger OEM's like Apple, Cisco, Google, VMware for the bugs identified in their products APPLE Apple has released 923…
Microsoft Signed Certificates Used in Malicious Activities
Threat actors have been seen exploiting legitimately signed Microsoft drivers in active intrusions into telecommunication, business process outsourcing, managed security service providers, and financial sectors Initial and detailed findings were…
GitHub New Vulnerability Reporting Scheme
GitHub has introduced a new direct channel for security researchers to report vulnerabilities in public repositories. This needs to be manually enabled by repository maintainers and, once active, enables security…
Why CVE Based Vulnerability Remediation is not effective ?
The traditional common vulnerabilities and exposures (CVEs) is a problem. But the reason varies person to person and organization to organization. The mitigation strategies of IT and security teams have…
CISA Vulnerability Management Transformation
The US. CISA released a set of documents to guide prioritization of software vulnerability remediation by agencies and other organizations. But use of the guidance is largely contingent on vendors…
Rezilion – Vulnerability Management Solution
Rezilion, a provider of DevSecOps automation tools announced the full availability of its, automated vulnerability management solution. Applying automation at all critical stages in the software security workflow, providing security…
Tenable Acquires Bit Discovery
Tenable is set to acquire Bit Discovery, an external attack surface management startup, for $45.5 million in an all-cash deal. Bit Discovery found in 2018, offers a platform for website…
Qualys Advanced Remediation Features to Minimize Risks
Qualys announced it is adding advanced remediation to the Qualys Cloud Platform. The new update enables organizations to fix asset misconfigurations, patch OS and third-party applications, and deploy custom software.…