compliance

Vulnerabilities

Issued by: Security Week

The issue has been a public embarrassment for Microsoft over the last two weeks as security researchers used social media to highlight major problems with Redmond’s mitigation guidance and the effectiveness of its out-of-band update. “We’re aware of claims and are investigating, but at this time we are not aware of any bypasses,” Microsoft said…

Vulnerabilities

Issued by: Security Week

Microsoft’s confirmation of a new, unpatched Windows Print Spooler bug comes days after researchers noticed that published proof-of-concept code for a different vulnerability was reliably exploiting fully patched Windows machines. Microsoft’s own misdiagnosis of a Print Spooler flaw that was just patched in June this year also added to the confusion. In a pre-patch advisory…

Network Security

Issued by: Security Week

The funding round was led by Princeville Capital and RPS Ventures, with additional participation from existing investors, including Sequoia Capital. Based in San Jose, California, Versa Networks platform is available via both the cloud and on-premises, helping enterprises keep branches, teleworkers, and users securely connected to cloud applications and data centers. A software-only offering, Versa…

Software Security

Issued by: Security Week

The U.K. competition watchdog has been investigating Google’s proposals to remove so-called third-party cookies over concerns they would undermine digital ad competition and entrench the company’s market power. To address the concerns, Google on Friday offered a set of commitments including giving the Competition and Markets Authority an oversight role as the company designs and…

Network Security

Issued by: Security Week

In a report to lawmakers, privacy commissioner Daniel Therrien said Clearview AI‘s collection of images without consent and the Royal Canadian Mounted Police (RCMP)’s use of that database were illegal. The software startup has stockpiled more than three billion images grabbed from popular social media platforms including Facebook, Instagram, Twitter and YouTube, as well as millions…

Cloud Security

Issued by: Security Week

I’m glad this column is coming out now instead of earlier this year. Cloud security is more topical than ever when considering all the fun things that have happened in 2021 with security startups! Before talking about innovation and startups though, let’s talk about a brief history of cloud security… especially public cloud. Securing the…

Network Security

Issued by: Security Week

Founded in 2017 and headquartered in New York City, Cylera seeks to protect both healthcare organizations and patients, providing a security and analytics platform that aims to deliver asset management, risk analysis, and threat detection for IoT, ICS, and IoMT (Internet of Medical Things). Cylera seeks to secure the entire connected environment, providing insights and…

Cloud Security

Issued by: Help Net Security

While 91% of organizations were successful in increasing security as a result of adopting cloud services, it remains a top concern for many, a part two of an Aptum study reveals. The report identifies common security, compliance and governance challenges impacting organizations undergoing cloud transformation. The research reveals that 51% of survey respondents see security…

Malware & Threats

Issued by: Security Week

The GDPR, which requires organizations to protect the personal data and privacy of EU citizens, came into force in May 2018, and, based on publicly available information, it since resulted in fines totaling more than €250 million (roughly $300 million). Due to the fact that not all fines are publicly reported and due to currency…