Stay updated with breaking news from Kenna Security. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
February 2, 2021 While Apple gets headlines for discovering zero-days, todayâs columnist, Ed Bellis of Kenna Security, says true zero-days are rare. Bellis says the vast majority of vulnerabilities are patched before CVE publication. However, in the rare case when exploits predate the availability of a patch, attackers get a 47-day head start â and thatâs something security teams need to focus on. MOST POPULAR
While Apple has grabbed headlines of late for discovering zero-days, todayâs columnist, Ed Bellis of Kenna Security, says true zero-days are rare. Bellis says the vast majority of vulnerabilities are patched before CVE publication. However, in the rare case when exploits predate the availability of a patch, attackers get a 47-day head start â and thatâs something security teams need to focus on. rwentechaneyCreativeCommons (Credit: CC BY-NC-SA 2.0) Common sense tells us that when code used to exploit vulnerabilities becomes publicly-available, somebody will use it for an attac...
minute read Share this article: Qualys said the vuln gives any local user root access to systems running the most popular version of Sudo. A doozy of a bug that could allow any local user on most Linux or Unix systems to gain root access has been uncovered — and it had been sitting there for a decade, researchers said. The bug was found in Sudo, a utility built into most Unix and Linux operating systems that lets a user without security privileges access and run a program with the credentials of another user. Qualys researchers named the vulnerability “Baron Samedit,” track...
Top cybersecurity firm FireEye says ‘nation-state’ is culprit News Highlights: Top cybersecurity firm FireEye says ‘nation-state’ is culprit. If one of the biggest names in cybersecurity can be broken, what chance does an average person have against hackers? That’s a likely question after high-profile cybersecurity firm FireEye said earlier this week that hackers breached its network and stole the toolkit it uses to investigate customers’ systems to find weaknesses. The hack was carried out “by a country with the highest level of attack capabilities,” FireEye CEO Kevin Mandia ...
The Top 21 Security Predictions for 2021 As we recover from the worst pandemic in a century, what will the New Year bring in cyberspace? Here’s your annual roundup of security industry forecasts, trends, themes and cybersecurity predictions. Shutterstock/vs148 When the topic of 2021 security predictions came up at a recent meeting of top cyberindustry executives, several leaders starting laughing. “Really? After we completely blew it last year?” said one chief strategist. “Wow! We’re not even out of the woods yet with COVID-19,” said a marketing expert. “How can we ...