4644 matches found
Gratipay: SSl Weak Ciphers
Summary Websites using TLS 1.0 will be considered non-compliant by PCI after 30 June 2018. Description TLS 1.0 has several flaws. An attacker can cause connection failures and they can trigger the use of TLS 1.0 to exploit vulnerabilities like BEAST Browser Exploit Against SSL/TLS. Steps To...
Countdown to GDPR: Get 20/20 Visibility Into Your IT Assets
Anyone questioning the importance of IT asset visibility in an organization’s security and compliance postures ought to review the EU’s General Data Protection Regulation GDPR, which goes into effect next year. With the severe requirements the GDPR places on how a business handles the personal da...
Petya Ransomware: What You Need to Know
On Tuesday, a variant of the ransomware "Petya" began propagating in several countries across Europe. This new variant leverages the EternalBlue exploit used in WannaCry, and also takes advantage of misconfigured permissions to spread throughout the network. EternalBlue is a leaked exploit...
Qualys Cloud Suite 8.10.1 New Features
This new patch release of the Qualys Cloud Suite, version 8.10.1, includes updates to password management, user roles & permissions, and User Defined Control improvements in Qualys Policy Compliance PC. Feature Highlights Qualys Cloud Platform Platform Password Improvements - In this release, we...
System Integrity Management Platform: SIMP
System Integrity Management Platform The System Integrity Management Platform SIMP is an Open Source framework designed around the concept that individuals and organizations should not need to repeat the work of automating the basic components of their operating system infrastructure. Expanding...
[SECURITY] Fedora 24 Update: firefox-54.0-2.fc24
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Few Victims Reporting Ransomware Attacks to FBI
Ransomware may have been the most prevalent internet threat of 2016, and WannaCry certainly made it a mainstream conversation, but that doesn’t mean people are reporting incidents to law enforcement. The FBI’s Internet Crime Complaint Center’s annual report published this week counted only 2,673...
Average Cost of Breach Goes Down, For the First Time Ever
NEW YORK–The global average cost of a data breach last year dropped 11.4 percent from 2015 to $3.6 million. The reduction is attributed mostly to a strong U.S. dollar, with wins also offset by a 1.8 percent increase in the size of breaches in 2016. The numbers come from Peter Allor, senior cyber...
Bringing Data Center Security to Cloud Speed
Last week, while visiting the product management team for Deep Security, I asked about their latest release. They surprised me by saying the big news is that there IS a release. Confused, I asked them to elaborate… You see, when you develop software, you’re faced with many choices, one of which i...
F5 Compliance Checks
Binary data f5compliancecheck.nbin...
Countdown to GDPR — Reduce your Risk
First discussed in the 1990s and turned into law last year, the EU’s General Data Protection Regulation GDPR finally goes into effect in May 2018, imposing strict requirements on millions of businesses and subjecting violators to severe penalties. The complex regulation is of concern not just to...
IBM BigFix Compliance Analytics Security Bypass Vulnerability
IBM BigFix Security Compliance Analytics is a suite of systems management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other functions. A security bypass...
Enterprise Security: EAA Exceeds Compliance Standards
I sat down again with John Payne, Akamai's Chief Architect of Infrastructure and Security, as well as Keith Hillis, Director IT Risk & Security. We spoke about enterprise security compliance, and how Enterprise Application Access EAA exceeds Akamai's requirements and simplifies the process for...
Arista EOS Compliance Checks
Binary data aristacompliancecheck.nbin...
AWS Public Sector Summit 2017: Cloud Super Powers and Security
Coalfire recently returned from the Amazon Web Services AWS Public Sector Summit, held in Washington, D.C., which addresses some of the most pressing issues todays leaders face around security, governance and compliance, and more. While Coalfire has attended the show in the past, we were especial...
[SECURITY] Fedora 26 Update: firefox-54.0-2.fc26
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
IBM BigFix Security Compliance Analytics Information Disclosure Vulnerability
IBM BigFix Security Compliance Analytics is a suite of systems management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other functions. IBM BigFix Security Complian...
CVE-2017-1197
IBM BigFix Compliance TEMA SUAv1 SCA SCM uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 123672...
