enterprise security
WebAssembly: The Fly on the Wall Delivering Malware Past Secure Web Gateways
Engineering @ SquareX | | Cybersecurity, enterprise security, Malware Analysis, Red Team, Secure Web Gateway
‘Last Mile Reassembly Attacks’ evade every Secure Web Gateway in the market and deliver known malware to the endpointAt DEF CON 32, SquareX presented groundbreaking research curating vulnerabilities in Secure Web Gateways (SWGs) ...
Critical Exim Vulnerability Threatens Millions of Email Servers
Rohan Timalsina | | CVE-2024-39929, Cyber Threats, cybersecurity defense strategies, Cybersecurity Weaknesses, email security, Email Server Security, enterprise security, Exim mail server, exim vulnerability, Linux & Open Source News, Malicious Emails, open source, Timely Patching
Exim is a widely used, open-source mail transfer agent (MTA) for Unix and Unix-like operating systems. A critical vulnerability has been discovered in Exim that could allow attackers to bypass security filters ...
AI and the Changing Face of Enterprise Security Threats
Explore how AI is revolutionizing enterprise security by improving threat detection, prevention, and response. Learn about the new challenges and opportunities that AI brings to the cybersecurity landscape ...
Zero-Trust Strategies: Paving the Way for a Secure Future & Sustainable Enterprise Growth
Explore the importance of zero-trust in safeguarding sensitive information, enhancing organizational visibility, and ensuring a secure and seamless user experience ...
Security Boulevard
CISA Report: Memory Safety Risks in Critical Open Source Projects
Rohan Timalsina | | Buffer Overflow, cisa, CISA Report, CISA Research, cybersecurity defense strategies, enterprise security, Linux & Open Source News, memory corruption, Memory Safety, Memory Security, memory-safe languages, memory-unsafe languages, Open Source Projects, Open Source Threats
Open-source projects are the cornerstone of modern software infrastructure, powering everything from web browsers to mobile apps and cloud services. These projects, contributed to and maintained by communities worldwide, enable innovation and ...
Linux Kernel AWS Vulnerabilities Fixed in Ubuntu 16.04
Rohan Timalsina | | enterprise security, Extended Lifecycle Support, KernelCare Enterprise, Linux & Open Source News, linux kernel patching, Linux Kernel Security Patches, linux live patching, live patching, security patches, security vulnerabilites, Ubuntu 16.04, Ubuntu 16.04 End of Life, Ubuntu Security Fixes, Ubuntu Security Updates, Ubuntu16.04 ELS
Several security vulnerabilities in the Linux kernel for Amazon Web Services (AWS) systems in Ubuntu 16.04 have been addressed by the Ubuntu security team. These fixes are crucial for maintaining system integrity ...
CISA Alert: Urgent Update Needed for Apache Flink Vulnerability
Rohan Timalsina | | Apache Flink, Apache Flink vulnerability, CISA Advisory, cisa known exploited vulnerabilities, cisa known exploited vulnerabilities catalog, CISA Threat Update, CVE-2020-17519, cybersecurity threats, enterprise security, federal agencies, improper access control, Known Exploited Vulnerabilities, Linux & Open Source News, open source
Attention Apache Flink users! The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added an Apache Flink vulnerability to its Known Exploited Vulnerabilities Catalog, highlighting evidence of its active exploitation. Apache Flink ...
Critical Fluent Bit Vulnerability Affects Major Cloud Providers
Rohan Timalsina | | cloud environments, Cloud Infrastructure, Cloud Security, Cloud Threats, CVE-2024-4323, Denial-of-Service (DoS), enterprise security, Fluent Bit, Fluent Bit vulnerability, Information Disclosure, Linguistic Lumberjack, Linguistic Lumberjack vulnerability, Linux & Open Source News, open source, RCE (Remote Code Execution)
Researchers have identified a critical memory corruption vulnerability in Fluent Bit, a popular logging and metrics utility. Dubbed Linguistic Lumberjack, this flaw exists in Fluent Bit’s embedded HTTP server, specifically in the ...
VMware Workstation and Fusion: Critical Security Flaws Fixed
Rohan Timalsina | | arbitrary code execution, Denial-of-Service (DoS), enterprise security, Linux & Open Source News, Linux Virtualization, security patches, virtual patching, Virtualization, VMware, VMware Fusion, VMware Security, VMware security advisories, VMware vulnerabilities 2024, VMware Workstation
VMware, a leading virtualization technology company, has fixed multiple security vulnerabilities found in VMware Workstation and Fusion products. These flaws, if exploited, could allow attackers to cause a denial of service, obtain ...
City of Helsinki Data Breach: What You Need to Know
Rohan Timalsina | | City of Helsinki data breach, cybersecurity threats, Data Breach Incident, data breach response, Data breaches, education, enterprise security, Helsinki Education Division, Linux & Open Source News, Timely Patching
On May 2, 2024, the City of Helsinki announced the data breach targeting its Education Division. However, the breach was discovered on April 30, 2024, and an investigation was promptly carried out ...