Beers with Talos Ep. #53: Shiny happy election security (and ninjas)

Beers with Talos BWT Podcast Ep. 53 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded May 10, 2019 — Election security has been a dominant headline for some time, so it’s high time we take a look at what th...

Understand and improve your security posture with Microsoft 365

I kickstarted 2019 with a “dry,” keto January. And, as so often happens, I found a parallel between my personal life and my chosen industry, cybersecurity. In this case, it was measurement. How do you know if you’re healthy? There are clear indicators when you’re not healthy, such as a sore throa...

5 steps financial institutions can take to reduce their cybercrime risk

When it comes to cybersecurity, financial institutions are uniquely challenged as they are often a target for hackers. My customers rightly worry about exposing their business and the broader financial system to a security breach. Some are reticent to adopt new technology that will help them stay...

F5 Networks Acquires NGINX For $670 Million

One of the most important software companies NGINX, which is also behind the very popular open-source web server of the same name, is being acquired by its rival, F5 Networks, in a deal valued at about $670 million. While NGINX is not a name that you have ever heard of, the reality is that you us...

Security Bulletin: Multiple vulnerabilities in Java SDK affect IBM b-type SAN directors and switches.

Summary There are multiple vulnerabilities in SDK Java™ Technology Edition used by IBM b-type SAN directors and switches. These issues were disclosed as part of the Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10356 DESCRIPTION: An unspecified vulnerability related to t...

brownfuneraldirectors.com XSS vulnerability

Open Bug Bounty ID: OBB-363770 Description| Value ---|--- Affected Website:| brownfuneraldirectors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

haleyfuneraldirectors.com XSS vulnerability

Open Bug Bounty ID: OBB-308255 Description| Value ---|--- Affected Website:| haleyfuneraldirectors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OpenVPN to Undergo Cryptographic Audit

The next version of the open-source OpenVPN software will be audited by an well-known cryptographer. It was announced Wednesday that Matthew D. Green, PhD, a cryptographer, computer science professor, and researcher at Johns Hopkins University will carry out an audit of the code currently availab...

Coalfire Contributes to New Book on Cybersecurity

Today marks the launch of a new book published by the New York Stock Exchange and Palo Alto Networks called, "Navigating the Digital Age: The Definitive Cybersecurity Guide for Directors and Officers." Im proud to have worked with my predecessor, the late Rick Dakin, to contribute a chapter to th...

Report: NASDAQ Hackers Spied On Corporate Directors

The hackers who compromised systems belonging to the NASDAQ stock market last year were able to install monitoring software that allowed them to spy on the doings of corporate directors, Reuters is reporting. The news adds critical details to the story of an October, 2010, compromise of Director’...

Coalfire Appoints Larry Jones to Board of Directors

We are proud to announce the election of Larry Jones to our board of directors. Larry is the former CEO of StarTek, Activant, Message Media and NeoData, and is a seasoned veteran in technology services. He also serves on the board of Comverge, Inc., a publicly traded provider of smart grid, deman...

Report: NSA Looks Into NASDAQ Hack

The National Security Agency has joined in a cyber forensic investigation off a major attack on NASDAQ OMX Group, Inc. which operates the NASDAQ stock exchange, according to a report on Wednesday by Bloomberg. As reported by Threatpost, the tech-heavy stock exchange was discovered to be infiltrat...

NASDAQ Hack Raises Critical Infrastructure Concerns

NASDAQ OMX, owners and operators of the NASDAQ Stock Exchange, reported this weekend that their systems had been infiltrated by unknown hackers. According to a report in the New York Times, NASDAQ OMX contacted federal law enforcement officials after discovering suspicious files in a part of thei...

CVE-2005-2487

Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service connectivity and array access loss via a network broadcast storm...

CVE-2005-2487

CVE-2005-2487 affects Sun McData switches and directors 4300, 4500, 6064 and 6140 prior to E/OS 6.0.0. The vulnerability may allow a denial-of-service impacting connectivity and array access through a network broadcast storm. The provided documents indicate the affected components and the likely ...