ChannelLife Canada - Industry insider news for technology resellers
Canada

Common Vulnerabilities and Exposures (CVE) Stories - Page 18

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Continuous attack attempts discovered on Atlassian Confluence zero day
Firewalls

Continuous attack attempts discovered on Atlassian Confluence zero day

Following a coordinated disclosure of a zero-day vulnerability by Volexity in Atlassian Confluence, attackers went wild to exploit it.

By Shannon Williams • 3 min read • Mon, 3rd Oct 2022
Black Lotus Labs discovers new, multipurpose malware
Malware

Black Lotus Labs discovers new, multipurpose malware

Black Lotus Labs, the threat intelligence team at Lumen, has discovered a new, rapidly growing, multipurpose malware written in the Go programming language.

By Catherine Knowles • 3 min read • Fri, 30th Sep 2022
Decrease in malware volume, but surge in encrypted malware
Malware

Decrease in malware volume, but surge in encrypted malware

The Q2 Internet Security Report found office exploits continue to spread more than any other category of malware.

By Shannon Williams • 3 min read • Thu, 29th Sep 2022
Cybersecurity loopholes prevalent in South East Asia
Advanced Persistent Threat Protection

Cybersecurity loopholes prevalent in South East Asia

In terms of the share of vulnerabilities with publicly available exploits, three countries out of top five are located in Southeast Asia.

By Shannon Williams • 4 min read • Tue, 27th Sep 2022
Trellix advances threat intelligence with new research centre
EduTech

Trellix advances threat intelligence with new research centre

Trellix has announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.

By Catherine Knowles • 3 min read • Tue, 27th Sep 2022
August's top malware: Emotet knocked off top spot
Malware

August's top malware: Emotet knocked off top spot

FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.

By Shannon Williams • 6 min read • Fri, 16th Sep 2022
Rapid7 issues vulnerability advisory for two Baxter devices
Internet of Things

Rapid7 issues vulnerability advisory for two Baxter devices

Rapid7 has issued a vulnerability advisory for two Baxter Healthcare TCP/IP-enabled medical devices: SIGMA Spectrum Infusion Pump and SIGMA WiFi Battery.

By Gaurav Sharma • 3 min read • Tue, 13th Sep 2022
How to protect against the growing fileless malware threat
Malware

How to protect against the growing fileless malware threat

In 2017 the Ponemon Institute reported that fileless attacks are ten times more successful than file-based attacks.

By Carolina Valencia • 5 min read • Wed, 31st Aug 2022
Internet of Things vulnerability disclosures grew 57%
Internet of Things

Internet of Things vulnerability disclosures grew 57%

Vulnerability disclosures impacting IoT devices increased by 57% in the first half of 2022 compared to the previous six months.

By Shannon Williams • 4 min read • Fri, 26th Aug 2022
Ransomware variants almost double in six months – FortiGuard
Malware

Ransomware variants almost double in six months – FortiGuard

Exploit trends demonstrate the endpoint remains a target as work-from-anywhere continues, according to a new report.

By Shannon Williams • 7 min read • Mon, 22nd Aug 2022
Check Point Research finds vulnerabilities in Xiaomi's mobile payment mechanism
EduTech

Check Point Research finds vulnerabilities in Xiaomi's mobile payment mechanism

Check Point Software uncovers vulnerabilities in Xiaomi's mobile payment system, potentially affecting up to 1 billion users. Fixes have been provided.

By Mitchell Hageman • 3 min read • Thu, 18th Aug 2022
'Windows shops' target admin rights to de-risk their environments
Cybersecurity

'Windows shops' target admin rights to de-risk their environments

New data shows up to 75% of critical vulnerabilities could be mitigated through a rights and privileges crackdown.

By Scott Hesford • 4 min read • Wed, 17th Aug 2022
8x more users attacked via old Microsoft Office vulnerability in Q2
Cybersecurity

8x more users attacked via old Microsoft Office vulnerability in Q2

Exploits for vulnerabilities in Microsoft Office have surged, accounting for 82% of total exploits in Q2 2022, according to Kaspersky.

By Shannon Williams • 3 min read • Wed, 17th Aug 2022
Tenable makes additions to Cloud Security portfolio
DevOps

Tenable makes additions to Cloud Security portfolio

Tenable has announced additions to Tenable Cloud Security that represent the next step in assessing threats related to cloud vulnerabilities.

By Catherine Knowles • 4 min read • Fri, 12th Aug 2022
Nozomi Networks Labs identifies impacts on 2022 threat landscape
Malware

Nozomi Networks Labs identifies impacts on 2022 threat landscape

Nozomi Networks' latest research reveals wiper malware, IoT botnet activity, and the Russia/Ukraine war as key threats in 2022.

By Zach Thompson • 3 min read • Thu, 4th Aug 2022
Claroty's Team82 uncovers two vulnerabilities in FileWave's MDM system
Unified Communications

Claroty's Team82 uncovers two vulnerabilities in FileWave's MDM system

Claroty's research arm (Team82) has uncovered and disclosed two critical vulnerabilities in FileWave's Mobile Device Management (MDM) system.

By Mitchell Hageman • 2 min read • Fri, 29th Jul 2022
Aqua Security unveils out-of-the-box runtime protection
Data Protection

Aqua Security unveils out-of-the-box runtime protection

Aqua Security has launched out-of-the-box runtime protection with minimal configuration to stop attacks in real-time on running workloads.

By Zach Thompson • 4 min read • Tue, 26th Jul 2022
Zero-day attacks climb as hackers get more sophisticated
Malware

Zero-day attacks climb as hackers get more sophisticated

Hackers are exploiting security vulnerabilities faster than ever before, with the average time to exploitation down from 42 days to just 12 days.

By Caitlin Condon • 5 min read • Mon, 18th Jul 2022
Check Point reveals top malicious threats in June 2022
Malware

Check Point reveals top malicious threats in June 2022

New Android banking malware, MaliBot, emerges following FluBot takedown. It disguises itself as crypto mining apps and targets mobile banking users.

By Catherine Knowles • 4 min read • Fri, 15th Jul 2022