NETGEAR Armor, powered by Bitdefender, enhances its cybersecurity subscription service with improved features and new tiers to safeguard home networks against increasing cyber threats.

Delinea has joined the CVE Program as a CVE Numbering Authority, enabling the company to assign CVE IDs to vulnerabilities in its software, enhancing cybersecurity efforts.

Protect AI has joined Microsoft's Pegasus Program to enhance AI security solutions for enterprises, enabling accelerated adoption of secure AI technologies.

Cyware has introduced its Healthcare Threat Intelligence Platform, designed to improve cybersecurity for healthcare organizations facing increasing cyber threats including ransomware.

Varonis Systems, Inc. has expanded its data security coverage with new integration for Databricks, enhancing its data intelligence capabilities.

CISA, FBI, NSA, and International Partners Release Joint Advisory on 2023 Top Routinely Exploited Vulnerabilities

The Common Vulnerabilities and Exposures (CVE) Program celebrates 25 years of advancing global cybersecurity cooperation and innovation in vulnerability management.

JFrog Schedules Third Quarter 2024 Financial Results Call

Progress Q3 2024 Earnings Exceed Estimates with ShareFile Acquisition Plans

CISA Adds One Known Exploited Vulnerability to Catalog

Overview A vulnerability in the user of hard-coded Platform Keys (PK) within the UEFI framework, known as PKfail, has been discovered. This flaw allows attackers to bypass critical UEFI

Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Overview Multiple hosted, outbound SMTP servers are vulnerable to email impersonation. This allows authenticated users and certain trusted networks to send emails containing spoofed sender information. Two vulnerabilities were

Overview A vulnerability in the RADIUS protocol allows an attacker allows an attacker to forge an authentication response in cases where a Message-Authenticator attribute is not required or enforced.

“We have not identified evidence suggesting this activity was caused by a vulnerability, misconfiguration or breach of Snowflake’s platform,” Snowflake said.

The partnership may further broaden to the security services edge and secure access service edge space in the future.

Amazon Web Services, Cisco, Google and Microsoft are among companies that have signed Cybersecurity and Infrastructure Security Agency Secure by Design pledge.

“We are doing this primarily because customers that who are just purely running Microsoft are unable to stop the breach to keep their estates safe,” CrowdStrike's Raj Rajamani said.

Overview The Intelligent Platform Management Interface (IPMI) implementations in multiple manufacturer's Baseboard Management Controller (BMC) software are vulnerable to IPMI session hijacking. An attacker with access to the BMC

The Akamai Guardicore Platform uses generative artificial intelligence to streamline the zero-trust implementation.

The vulnerability (CVE-2024-3400) has the highest severity score of 10.0 on the Common Vulnerability Scoring System.

The solution combines Comcast Business’s security services with Rapid7’s security operations platform and expertise.

The updates to Red Hat Trusted Software Supply Chain improve IT teams’ ability to embed security into the application development lifecycle.