Working Together with Our Customers to Build a Sustainable Future

By now, we hope you've read Monday's and Tuesday's blog posts announcing the release of our annual sustainability report, our sustainability program, and the technical innovation behind it. Whilst it's clear Akamai has made great strides on sustainability, in this blog post I will discuss the...

North Korea Targets Security Researchers in Elaborate 0-Day Campaign

Hackers linked to North Korea are targeting security researchers with an elaborate social-engineering campaign that sets up trusted relationships with them — and then infects their organizations’ systems with custom backdoor malware. That’s according to Google’s Threat Analysis Group TAG, which...

Finding Results at the Intersection of Security and Engineering

As vice president and head of global security at ActiveCampaign, I’m fortunate to be able to draw on a multitude of experiences and successes in my career. I started in general network security, where I was involved in pen testing and security research. I worked at several multibillion-dollar Saa...

Information Leakage Vulnerability in Zhiyuan A6-m Collaboration Management Software Enterprise Edition

Zhiyuan A6-m Collaboration Management Software Enterprise Edition is a collaboration management software for small and medium-sized enterprises. There is an information leakage vulnerability in Zhiyuan A6-m Collaboration Management Software Enterprise Edition. An attacker can exploit the...

Flying Book (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-09688)

Flybook is an enterprise collaboration platform. A dll hijacking vulnerability exists in Flying Book Windows client, which can be exploited by an attacker to gain control of the server...

MSPs, have you picked the right PSA for you yet?

Not long ago, we helped MSPs pick the right remote monitoring and management RMM platform for them, and make it an essential part of their service toolkit. As you may recall, an RMM is a tool that helps MSPs do the work. And what better way to track the work—and other elements associated with...

Simplify compliance and manage risk with Microsoft Compliance Manager

The cost of non-compliance is more than twice that of compliance costs. Non-compliance with the ever-increasing and changing regulatory requirements can have a significant impact on your organizations brand, reputation, and revenue. According to a study by the Ponemon Institute and Globalscape,...

Simplify compliance and manage risk with Microsoft Compliance Manager

The cost of non-compliance is more than twice that of compliance costs. Non-compliance with the ever-increasing and changing regulatory requirements can have a significant impact on your organizations brand, reputation, and revenue. According to a study by the Ponemon Institute and Globalscape,...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2021-48902)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...

Microsoft SharePoint Tampering Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...

Microsoft SharePoint Spoofing Vulnerability (CNVD-2021-48899)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

Microsoft SharePoint Spoofing Vulnerability (CNVD-2021-48900)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2021-48898)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Install Apache Zeppelin and connect it to AWS Athena for data exploration, visualization and collaboration

Introduction Apache Zeppelin is a Web-based, open source, notebook system that enables data-driven, interactive data analytics and collaborative documents with SQL. At Imperva Research Group we use it on a daily basis to query data from the Threat Research Data Lake using AWS Athena query engine...

Experts Sound Alarm On New Android Malware Sold On Hacking Forums

Cybersecurity researchers have exposed the operations of an Android malware vendor who teamed up with a second threat actor to market and sell a remote access Trojan RAT capable of device takeover and exfiltration of photos, locations, contacts, and messages from popular apps such as Facebook,...

Zhiyuan OA-A8-V5 Collaboration Management Software has a Logic Flaw Vulnerability

The business scope of Beijing Zhiyuan Internet Software Co., Ltd. includes: technology development, technology transfer, technology consulting and technology service. A logic flaw vulnerability exists in Zhiyuan OA-A8-V5 collaborative management software, which can be exploited by attackers to...

A6-s collaborative management software has information leakage vulnerability

A6-s Collaboration Management Software is a set of collaborative office software that can help small and micro-organizations such as enterprises and institutions to quickly deliver products. A6-s Collaboration Management Software has an information disclosure vulnerability that can be exploited b...

2020 Work-for-Home Shift: What We Learned

Goodbye, 2020 — and good riddance, right? Most of us don’t want to take too much from this year into the next — but let’s make an exception for what we learned about security in the wake of the COVID-19 pandemic. In 2021 after all, more enterprises will permanently downsize their physical spaces...

Set New InsightVM Goals and Share with Your Team for Increased Visibility and More Efficient Execution

Since 2018, thousands of enterprises have utilized InsightVM’s Goals and SLAs feature to build their organization-specific security goals. Through Goals and SLAs, security teams ensure that they’re making progress toward their goals and service-level agreements SLAs at an appropriate pace, and th...

Mitel MiCollab Information Disclosure Vulnerability

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in Mitel MiCollab versions prior to 9.2 for NuPoint Messenger. The vulnerability stems from insufficient access control. An attacker could exploit the vulnerability t...