While Cisco says it is not aware of any malicious use of the vulnerability, with 20,000 customers around the world using Cisco SD-WAN, the high-severity bug remains notable.

The latest release includes what Canonical calls “kernel self-protection measures,” which target control flow integrity and includes stack-crash protection.

Dynamic Threat Analysis protects containerized applications from image-based malware by automatically running images in a secure sandboxed environment.

The vulnerability could allow a hacker to “extract highly sensitive information which could be used to compromise vCenter Server or other services,” the security advisory said.

This is also a great time to start a bug bounty program, says Guy Podjarny, founder and president of Snyk.

Intel warned of financial hit; Attackers exploited remote-code execution vulnerabilities in Microsoft bug; and Akamai got SASE.

Microsoft said it’s “aware of limited targeted attacks” using the remote-code execution vulnerabilities in Windows Adobe Type Manager Library.

All of these bugs require some form of authentication, which makes them more difficult to exploit. But they are noteworthy because of the sheer number of companies that use

“Vulnerability management, configuration management, patch management — those things should still be top of mind for CISOs,” Splunk’s Monzy Merza said. “[Security] hygiene can be sexy.”

Between 2016 and 2019, Necurs was the most prominent spam and malware-delivery method and was responsible for 90% of the malware spread by email worldwide.

AT&T works with Palo Alto Networks and Broadcom on a Disaggregated Scalable Firewall; serious Intel vulnerability discovered; and Juniper jumped aboard the SONiC train.

The bug would allow an attacker to exploit a known vulnerability in Intel's CSME to gain access to the chipset key used for cryptography.

Exposures and data breaches due to misconfigurations have become an “alarmingly common” trend according to StackRox’s latest Kubernetes Security Report.

The bug was in its authentication policy and allowed an attacker unauthorized access to information without needing an authorized token.

Of the more than 8.5 billion records breached in 2019, 7 billion were due to misconfigurations.

The vulnerability allows an attacker to activate the affected device's Telnet service over an open transmission control protocol port and gain unauthorized access.

Cisco patched zero-day vulnerabilities in millions of devices; the White House backed US 5G plan; and IBM CTO called open source vital to edge success.

If exploited, the bugs would allow an attacker to eavesdrop on voice and video calls and steal corporate data flowing through the network’s switches and routers.

Misconfiguration, a widespread threat that requires a low level of sophistication, tops the list.

In the past three weeks, Microsoft, Cisco, Oracle, and Citrix have announced a slew of vulnerabilities as the companies have scrambled to lock down their product lines.

The open source security startup reported over 400% revenue growth in 2019 and says its customers include Google, Intuit, New Relic, and Salesforce.

“We urge customers to immediately install these fixes,” noted Citrix Chief Information Security Officer Fermin Serna in a blog post.

Almost 40 vulnerabilities with a 9.8 severity rating can be exploited over a network without requiring user credentials. So can dozens of others with lesser severity ratings.

Verizon to lead new 5G group; Microsoft, NSA warn of "critical" vulnerability; and Red Hat updated OpenShift to target multi-cloud, security.