SAP said it has now rolled out 10 new products that combine its operational data (O-data) with experience data (X-data) gleaned from Qualtrics.

Cisco previously disclosed 42 advisories in April including critical security alerts for operating systems, routers, and LAN software.

The British government has stopped short of banning Huawei but wants to exclude the vendor from sensitive parts of the network.

One of the critical vulnerabilities has been exploited in the wild. It’s part of a DNS hijacking campaign dubbed “Sea Turtle” that Cisco Talos researchers disclosed earlier this week.

The products insecurely store authentication and/or session cookies, giving hackers access to a company’s virtual private network.

The offering leverages its existing cloud IP suite of services — including routing, SD-WAN, and security — while reducing the complexity and cost of legacy networks.

The company issued patches for vulnerabilities found in vCloudDirector for service providers as well as VMware EXSi, Workstation, and Fusion.

U.K. authorities have “limited confidence in Huawei’s ability to understand the content of any given build or in their ability to perform true root cause analysis of identified issues.”

If compromised, the flaw could allow an attacker to write files to any path on the user’s machine.

The vulnerability could allow a remote attacker to execute arbitrary commands on the underlying Linux shell as root.

The Kubernetes community does not view security as something tied to specific updates and instead is “something to be continually evaluated and improved.”

Andy Purdy argues that the best approach to security is to require a diversity of suppliers and clear divisions of responsibility.

The storage vendor isn’t aware of any customer attacks resulting from the vulnerability and said it could only have potentially affected a small portion of the customer base.

Adlink and Google Cloud partner on IoT; Red Hat debuts a Kubernetes-native Java framework; and news, partnerships, and releases from RSA.

The currency miners were relying on a Docker runC vulnerability discovered in early February (later patched by Docker Inc.) in combination with an exposed remote Docker API.

The increasingly complex array of cloud environments used by businesses provides bad actors with great opportunities to sneak into corporate networks.

Founded by former Yahoo security officer Jeremiah Grossman, WhiteHat takes a DevSecOps approach to protecting applications.

The attacks occurred after security research firm Pen Test Partners posted a blog containing demonstration code on how to exploit the routers. The firm was involved in initially finding

The company also released research that found 97 percent of companies report problems deploying and managing public clouds.

Companies want simplicity and security, so “I don’t think building virtual networks on top of the networks we already have is the way to go,” said 128 COO Patrick

Tenable, Forescout Both Merge Their IT and OT Security Platforms

The company’s customers include Nutanix, Raytheon, and Tavant. It has raised almost $30 million to date.

The new security tool it built analyzes data across 150 sources. It then uses machine learning to predict the likelihood a vulnerability will be exploited in the next 28

Cisco discovered a number of vulnerabilities affecting devices that connect to its SD-WAN software. This includes one critical security flaw to its vController software.