Cloud Security

Vulnerabilities

Issued by: Security Week

Microsoft’s confirmation of a new, unpatched Windows Print Spooler bug comes days after researchers noticed that published proof-of-concept code for a different vulnerability was reliably exploiting fully patched Windows machines. Microsoft’s own misdiagnosis of a Print Spooler flaw that was just patched in June this year also added to the confusion. In a pre-patch advisory…

Application Security

Issued by: Security Week

Sevco Security, based in Austin, Texas, has raised $15 million in Series A funding led by SYN Ventures. The company said .406 Ventures, Accomplice, Bill Wood Ventures and fama Ventures also joined as investors. In a statement, Sevco Security said its platform delivers two values to customers: continuous converged visibility of all assets across siloed…

Network Security

Issued by: Security Week

The funding round was led by Princeville Capital and RPS Ventures, with additional participation from existing investors, including Sequoia Capital. Based in San Jose, California, Versa Networks platform is available via both the cloud and on-premises, helping enterprises keep branches, teleworkers, and users securely connected to cloud applications and data centers. A software-only offering, Versa…

Network Security

Issued by: Security Week

The project, called D3FEND, is available through the non-profit Mitre Corporation as a catalog of defensive cybersecurity techniques and their relationships to offensive/adversary techniques. The primary goal of the initial D3FEND release is to help standardize the vocabulary used to describe defensive cybersecurity technology functionality. Mitre described D3FEND as an “early stage experimental research project”…

Cloud Security

Issued by: Security Week

Attacks against the container infrastructure are continuing to increase in both frequency and sophistication. It takes just a few hours to detect a new vulnerable container using internet scanning tools like Masscan. The attacks are becoming more evasive, while the supply chain is now targeted. Aqua Security’s Team Nautilus has analyzed 17,358 attacks against its…

Mobile Security

Issued by: Security Week

Google announced end-to-end encryption is now available in Android, but only for one-on-one conversations between users of the Messages app. “No matter who you’re messaging with, the information you share is personal. End-to-end encryption in Messages helps keep your conversations more secure while sending. It ensures that no one can read the content of your…

Cloud Security

Issued by: Security Week

“We are going to have to assess where we are in regards to the ongoing litigation and determine what the best path forward is for the department,” deputy Pentagon press secretary Jamal Brown said, citing remarks by Deputy Defense Secretary Kathleen Hicks at a public forum late last month. Hicks said then that she could…