How to Protect the Data on Your Laptop

Your laptop is a treasure trove of personal and sensitive information—make sure it's as secure as it can be...

IBM Spectrum Protect Input Validation Error Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...

Rethinking IoT/OT Security to Mitigate Cyberthreats

We live in an exciting time. We’re in the midst of the fourth industrial revolution—first steam, followed by electricity, then computers, and, now, the Internet of Things. A few years ago, IoT seemed like a futuristic concept that was on the distant horizon. The idea that your fridge would be...

Vulnerability in the implementation of ARM operating systems for Windows, allowing a intruder to gain unauthorized access to protected information

The vulnerability in ARM-based Windows operating system implementations is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2020-17376

An information disclosure flaw was found in the live migration feature of OpenStack Nova. A user may gain access to destination host devices with the same path as those on the source host. This flaw allows an attacker to perform a soft reboot of an instance that has previously undergone live...

WAF and RASP: Best Practice for Defense in Depth

Why do you need a RASP solution if WAFs layer of defense is so powerful? The simple answer is that no single security product can provide protection for all threat vectors. A comprehensive IT security strategy includes risk-appropriate controls implemented where they can provide maximum efficacy,...

Support for IBM Cloud for VMware Solutions

Support Statement IBM Cloud for VMware Solutions provides full bare metal and hypervisor access and complete administrative permissions to vCenter, NSX, and any additional services. This ensures customers who transition their VMware infrastructure to IBM Cloud can expect a consistent level of...

The vulnerability of the implementation of the ConnectToRFBRepeater function in the cross-platform library LibVNCServer allows a hacker to cause a service failure.

The vulnerability of the ConnectToRFBRepeater function implementation in the cross-platform library LibVNCServer is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the qmail-verify module in the netqmail email client allows a hacker to gain access to confidential data.

The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to access confidential data...

McAfee Data Loss Prevention ePO extension code issue vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee, Inc. that prevents theft and accidental disclosure of confidential data and provides security policies for file processing and transmission, shared data flow control and data encryption. The...

9 Apps to Boost Your Phone's Security and Privacy

Android and iOS are getting better about protecting your data and device. But if you're looking for an extra line of defense, these can help...

PT-2020-5169 · Sap · Sap Netweaver +2

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 702, 730, 731, 740, 750 Description: The issue is related to improper access control in the SOA Configuration Trace component, allowing any authenticated user to enumerate all SAP users. Th...

Top Tips For Home Cybersecurity And Privacy In A Coronavirus-Impacted World (Part 2)

The past few months have seen radical changes to our work and home life under the Coronavirus threat, upending norms and confining millions of American families within just four walls. In this context, it’s not surprising that more of us are spending an increasing portion of our lives online. But...

Have I Been Pwned Set to Go Open-Source

Have I Been Pwned, the service that logs data breaches and lets individuals search to see if they’ve been affected by one, is about to go open-source. The result of that, according to its founder, will be additional transparency and security-enhancing features. HIBP, which was kicked off in 2013,...

New Guide: How Akamai Helps You Protect Privacy Data

Laws and regulations related to personally identifiable information PII are continuously being enacted around the world as data breaches and abuses persist. According to the February 2020 United Nations Conference on Trade and Development, 132 out of 194 countries had legislation put in place to...

Zero Trust: From security option to business imperative overnight

Not long ago when I spoke with customers about Zero Trust, our conversations focused on discussing the principles, defining scope, or sharing our own IT organization’s journey. Zero Trust was something interesting to learn about, and most organizations were very much in the exploratory phase. As...

P2PE v3.0 – Why organizations should prepare now

The Payment Card Industry Security Standards Council PCI SSC published version 3.0 of the Point-To-Point Encryption P2PE standard back in December 2019. The new version simplifies and adds flexibility to the process for component and solution providers to validate their P2PE products for cardhold...

The vulnerability of the Skype for Business application in Internet Explorer allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Skype for Business app in Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by clicking on a specially created link within the app...

The vulnerability in the Skype for Business app for the Microsoft Edge browser allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Skype for Business app for the Microsoft Edge browser is related to the lack of protection for business-related data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by clicking on a specially created link...

PT-2020-3584 · Apple · Macos Catalina +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 Description: An issue existed in the handling of environment variables, which has been addressed with improved validation. This issue may allow ...