A better cloud access security broker: Securing your SaaS cloud apps and services with Microsoft Cloud App Security

Today’s business uses an average of 1,180 cloud apps¹, with many of those organizations securing their apps through cloud access security brokers CASB. The organizational need for a CASB has grown alongside the use of cloud apps to enable remote work and greater user productivity. When security...

A better cloud access security broker: Securing your SaaS cloud apps and services with Microsoft Cloud App Security

Today’s business uses an average of 1,180 cloud apps¹, with many of those organizations securing their apps through cloud access security brokers CASB. The organizational need for a CASB has grown alongside the use of cloud apps to enable remote work and greater user productivity. When security...

Malaysia Air Downplays Frequent-Flyer Data Breach

Malaysia Airlines sent out an email to frequent flyer program members assuring them that there’s “no evidence” their personal data has been misused in the wake of a supply-chain attack via a third-party vendor. However, experts think that’s unlikely. And, they say the repercussions could be...

Compliance joins Microsoft Intelligent Security Association (MISA)

Like many of you, I’m thrilled to have my 2020 calendar safely in the recycling pile. During that time though, you too might have noticed how, perhaps unknowingly, you were able to turn some of last year’s lemons into lemonade. Maybe you developed a deeper appreciation for everyday moments and th...

JUnit4 Service Information Disclosure

The vulnerability of the JUnit4 library is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Why do companies fail to stop breaches despite soaring IT security investment?

Let's first take a look back at 2020! Adding to the list of difficulties that surfaced last year, 2020 was also grim for personal data protection, as it has marked a new record number of leaked credentials and PI data. A whopping 20 billion records were stolen in a single year, increasing 66% fro...

Microsoft Teams iOS Data Access

The vulnerability of the Microsoft Teams corporate platform for iOS is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Microsoft Windows PFX Cryptography Unauthorized Access

The vulnerability of the PFX PKCS12 – Public-Key Cryptography Standards cryptographic technology implementation in Microsoft Windows operating systems is related to the lack of protection for confidential data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Google Chrome WebView Unauthorized Access

The vulnerability of the WebView component in Google Chrome browsers relates to the lack of protection for transmitted data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Skype for Business Server Spoofing

The vulnerability of Skype for Business Server Microsoft Lync Server corporate communication servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

DevTools Unauthorized Access

The vulnerability of the DevTools set of tools in the Google Chrome web browser is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Performance API Component Google Chrome Unauthorized Access

The vulnerability of the Performance API component in the Google Chrome web browser is related to the lack of protection for the transmitted data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for privileged data. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows TCP/IP Code Execution

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows Graphics Component Code Execution

The vulnerability of the Microsoft Windows Graphics Component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Apache ActiveMQ Code Execution

The vulnerability of the Apache ActiveMQ software platform lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Edge Android Service Data Unauthorized Access

The vulnerability of Microsoft Edge browser for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The Weakest Link in Your Security Posture: Misconfigured SaaS Settings

In the era of hacking and malicious actors, a company's cloud security posture is a concern that preoccupies most, if not all, organizations. Yet even more than that, it is the SaaS Security Posture Management SSPM that is critical to today's company security. Recently Malwarebytes released a...

PT-2021-2074 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for iOS affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Microsoft Teams for iOS, which could allow a remote attacker to gain unauthorized access to protected...

PT-2021-2077

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the implementation of PFX encryption technology in Microsoft Windows, specifically concerning the lack of protection for service data. This could allow an...