Page 4 - Vulnerability Assessment & Penetration Testing (VA/PT)

Webinar

OnDemand | 2023 OT Cybersecurity Year in Review: Lessons Learned from the Frontlines

Marissa Costa, Senior Penetration Tester, Dragos , Jackson Evans-Davies, Director of Professional Services, Dragos , Hussain Virani, Senior Industrial Incident Responder, Dragos , Eddy Wade, Senior Industrial Consultant, Dragos • June 14, 2024

In the dynamic battleground of operational technology (OT) cybersecurity, the frontlines are where the most valuable lessons are learned. Join Dragos' panel of seasoned cybersecurity frontline experts as they draw on firsthand experiences from architecture reviews, incident response, and penetration testing in OT...

Article

NetSPI Strengthens Attack Surface Management With Hubble Buy

Michael Novinson • June 13, 2024

NetSPI acquired startup Hubble to bolster its attack surface management capabilities, promising a consolidated offering for both internal and external visibility within four months. The transaction aims to drive significant cross-selling opportunities and operational efficiencies.

►

Article

Building Cyber Resilience With Real-Time Attack Simulations

Tom Field • June 13, 2024

Cyber resilience has become more crucial than ever. Erwin Eimers, general manager, IT and cybersecurity and CIO/CISO of Sumitomo Chemical America, emphasized the importance of preparing for compromises and breaches, rather than just preventing them.

►

Article

Generative AI: A Game Changer for Blue Teams

Michael Novinson • June 12, 2024

Mandiant's Nader Zaveri explores how AI is revolutionizing cybersecurity. He discusses the advancements in blue team capabilities, the evolving role of generative AI in threat detection and the importance of intercepting threats before they reach end users.

►

Article

The Future of Digital Security by Design

Mathew J. Schwartz • June 11, 2024

Two key concepts are shaping how organizations protect their digital assets: cybersecurity by default and cybersecurity by design. Professor John Goodacre, director, Digital Security by Design, UKRI, discusses the need to design technology that inherently protects against vulnerabilities.

Article

Critical PHP Vulnerability Threatens Windows Servers

Prajeet Nair • June 8, 2024

A critical remote code execution vulnerability in PHP for Windows, affecting all releases since version 5.x, requires immediate action from server administrators. The flaw enables attackers to execute arbitrary code on remote PHP servers through an argument injection attack.

Article

Feds Issue Alerts for Flaws in 2 Baxter Medical Devices

Marianne Kolbasuk McGee • June 5, 2024

U.S. federal authorities are alerting healthcare entities about critical vulnerabilities in two medical device products from manufacturer Baxter. Both flaws can be exploited remotely, potentially jeopardizing patient care. Some experts say such disclosures in general need more attention.

►

Article

ISMG Editors: Opening Day Overview of InfoSec Europe 2024

Anna Delaney • June 5, 2024

Information Security Media Group editors are live at Infosecurity Europe Conference 2024 in London with an overview of opening-day activities and hot topics including the latest ransomware trends, software security, election security and artificial intelligence risks.

Blog

Why Tenable Is Eyeing Israeli Data Security Startup Eureka

Michael Novinson • June 4, 2024

IBM, Rubrik, Palo Alto Networks and CrowdStrike entered the red-hot data security posture management market with nine-figure deals announced between May 2023 and March 2024. Now, Tenable reportedly wants a piece of the action as it eyes the purchase of Eureka.

►

Article

ISMG Editors: Is SASE Living Up to the Hype in 2024?

Anna Delaney • May 31, 2024

In the latest weekly update, ISMG editors discussed the current state of Secure Access Service Edge solutions in 2024, vulnerabilities in Apple's Wi-Fi-based positioning system, and the patient safety questions arising after a cyberattack hit a U.S. hospital.

Whitepaper

Reducing Complexity in Healthcare IT (eBook)

May 29, 2024

Rapid expansion of telehealth services and the shift to remote work arrangements have introduced new vulnerabilities as these systems often rely on external networks that need security. At the same time, greater network complexity is making it more challenging for IT teams to monitor and secure all endpoints...

Article

Bugcrowd Buys Informer to Enhance Attack Surface Management

Michael Novinson • May 23, 2024

Bugcrowd has acquired Informer to enhance its external attack surface management, giving customers better visibility and security. The integration will bring Bugcrowd's existing bug bounty and penetration testing offerings together with new capabilities such as brand impersonation detection.

Article

CISA: NextGen Healthcare Flaw Still Exploited After 7 Months

Marianne Kolbasuk McGee • May 21, 2024

Cyberattackers are actively exploiting a vulnerability in the NextGen Healthcare Mirth Connect product, an open-source data integration platform widely used by healthcare companies, said CISA in an alert Monday. The flaw, which allows remote code execution, has been known since October 2023.

Article

HHS Funds $50M to Spot, Patch Hospital Vulnerabilities

Marianne Kolbasuk McGee • May 20, 2024

The highly targeted U.S. hospital sector could get a boost in avoiding cyberattacks with a $50 million investment by a federal research agency aimed at enhancing automation, vulnerability detection and remediation across a variety of devices in healthcare environments.

Article

Intel's Max Severity Flaw Affects AI Model Compressor Users

Rashmi Ramesh • May 20, 2024

A maximum-severity bug in Intel's artificial intelligence model compression software can allow hackers to execute arbitrary code on the company's systems that run affected versions. The technology giant has released a fix for the Neural Compressor flaw, which is rated 10 on the CVSS scale.