SecurityBrief Asia - Technology news for CISOs & cybersecurity decision-makers
Asia

Common Vulnerabilities and Exposures (CVE) Stories - Page 18

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Critical Microsoft Office patch exploited by new malware
Malware

Critical Microsoft Office patch exploited by new malware

Sophos has released details of a novel exploit that bypasses a patch for a critical vulnerability affecting the Microsoft Office file format.

By Shannon Williams • 3 min read • Fri, 24th Dec 2021
Security flaw identified in smartphone chip used in Android devices
Semiconductors

Security flaw identified in smartphone chip used in Android devices

Flaws in smartphone chip used in 37% of world's smartphones could enable eavesdropping or hiding malicious code, says Check Point Research.

By Shannon Williams • 3 min read • Fri, 26th Nov 2021
Vulnerability in Cisco security devices could cause firewalls to fail
Privileged Access Management

Vulnerability in Cisco security devices could cause firewalls to fail

Vulnerability in Cisco ASA and Cisco FTD firewalls discovered by Positive Technologies researcher, could lead to denial of service. Install updates.

By Shannon Williams • 3 min read • Wed, 24th Nov 2021
Claroty and JFrog discover 14 vulnerabilities in Busybox
Open source

Claroty and JFrog discover 14 vulnerabilities in Busybox

Team82 and JFrog discover 14 vulnerabilities in the latest version of BusyBox, affecting OT and IoT devices running on Linux.

By Ryan Morris-Reade • 4 min read • Fri, 19th Nov 2021
New Microsoft Defender vulnerability should concern every enterprise - expert
Cybersecurity

New Microsoft Defender vulnerability should concern every enterprise - expert

Microsoft Defender vulnerability poses significant threat, warns Virsec. With 55 vulnerabilities in total, it is deemed the most concerning by experts.

By Shannon Williams • 3 min read • Mon, 15th Nov 2021
A single source of truth: The future of the construction industry
Risk & Compliance

A single source of truth: The future of the construction industry

The COVID-19 pandemic has heightened risk for the construction industry, making software solutions crucial for reducing disputes.

By Tony Simonsen • 6 min read • Wed, 10th Nov 2021
ExtraHop launches decryption support for Microsoft to halt advanced attacks
Advanced Persistent Threat Protection

ExtraHop launches decryption support for Microsoft to halt advanced attacks

ExtraHop has expanded decryption support for Microsoft authentication and application protocols, providing high fidelity detection of malicious activity.

By Catherine Knowles • 3 min read • Tue, 9th Nov 2021
BlackBerry and Okta partner to deliver seamless identity and access capabilities
Malware

BlackBerry and Okta partner to deliver seamless identity and access capabilities

BlackBerry has announced a new technology integration between Okta's Identity Cloud and BlackBerry Spark unified endpoint management.

By Ryan Morris-Reade • 3 min read • Tue, 9th Nov 2021
Imperva launches free security assessment service for Amazon RDS
Cloud Security

Imperva launches free security assessment service for Amazon RDS

Imperva launches free cloud data security assessment for Amazon RDS databases, allowing teams to quickly identify compliance issues.

By Catherine Knowles • 3 min read • Fri, 29th Oct 2021
ATM vulnerabilities open door for attacks - report
Breach Prevention

ATM vulnerabilities open door for attacks - report

Vulnerabilities in Wincor Cineo ATMs allow attackers to bypass encryption and make cash withdrawals, according to researchers.

By Ryan Morris-Reade • 3 min read • Thu, 28th Oct 2021
Trickbot remains top malware impacting NZ - report
Malware

Trickbot remains top malware impacting NZ - report

CPR observed a concerning increase of various malware impacting New Zealanders, with 16 additional malware families tied at tenth place for the month.

By Shannon Williams • 5 min read • Mon, 18th Oct 2021
MysterySnail: Kaspersky finds zero-day exploit for Windows OS
Cybersecurity

MysterySnail: Kaspersky finds zero-day exploit for Windows OS

Kaspersky uncovers zero-day exploit for Windows OS, used in attacks by IronHusky group. Patched by Microsoft on October 12.

By Shannon Williams • 3 min read • Thu, 14th Oct 2021
BlackBerry and Deloitte join forces to secure IoT software supply chains
Supply Chain

BlackBerry and Deloitte join forces to secure IoT software supply chains

The partnership will address the increasing complexity and growing cybersecurity threats among multi-tiered software supply chains.

By Shannon Williams • 2 min read • Tue, 12th Oct 2021
90% of malware arriving over encrypted connections, Microsoft threats persist in popularity
Malware

90% of malware arriving over encrypted connections, Microsoft threats persist in popularity

Over 90% of malware arrived through encrypted connections in Q2 2021, highlighting the need for strong endpoint protection, says WatchGuard.

By Shannon Williams • 5 min read • Tue, 5th Oct 2021
New cyber-criminal group discovered targeting government servers, fuel, energy and aviation companies
DataCentre infrastructure

New cyber-criminal group discovered targeting government servers, fuel, energy and aviation companies

Researchers have identified a new, previously unknown group that has systematically attacked Russia's fuel and energy complex and its aviation industry.

By Ryan Morris-Reade • 4 min read • Fri, 1st Oct 2021
Security experts weigh in on Microsoft Azure security holes
Public Cloud

Security experts weigh in on Microsoft Azure security holes

The vulnerabilities currently putting Azure customers at risk are just the latest in a staggering number of crippling threats in internet software.

By Shannon Williams • 3 min read • Wed, 22nd Sep 2021
HackerOne unveils sweeping product expansion, including vulnerability ranking table
Cybersecurity

HackerOne unveils sweeping product expansion, including vulnerability ranking table

HackerOne introduces new features for its security intelligence services, including a worldwide top 10 ranking table and CVE Exploitation Index.

By Staff Writer • 3 min read • Tue, 21st Sep 2021
Microsoft Azure alert for authentication bypass vulnerability in Linux products
Firewalls

Microsoft Azure alert for authentication bypass vulnerability in Linux products

A patch is currently available for this vulnerability, however many sysadmins are potentially unaware they have the OMI product installed and are at risk. .

By Shannon Williams • 3 min read • Fri, 17th Sep 2021
Patch management, robust password policies vital in reducing risk of cyberattacks
Kaspersky

Patch management, robust password policies vital in reducing risk of cyberattacks

More than half of cyberattacks start with password brute force and vulnerability exploitation, according to new research by Kaspersky.

By Shannon Williams • 3 min read • Fri, 17th Sep 2021