Common Vulnerabilities and Exposures (CVE) stories - Page 12

In 2017 the Ponemon Institute reported that fileless attacks are ten times more successful than file-based attacks.

Vulnerability disclosures impacting IoT devices increased by 57% in the first half of 2022 compared to the previous six months.

Exploit trends demonstrate the endpoint remains a target as work-from-anywhere continues, according to a new report.

Check Point Software uncovers vulnerabilities in Xiaomi's mobile payment system, potentially affecting up to 1 billion users. Fixes have been provided.

New data shows up to 75% of critical vulnerabilities could be mitigated through a rights and privileges crackdown.

Exploits for vulnerabilities in Microsoft Office have surged, accounting for 82% of total exploits in Q2 2022, according to Kaspersky.

Tenable has announced additions to Tenable Cloud Security that represent the next step in assessing threats related to cloud vulnerabilities.

Nozomi Networks' latest research reveals wiper malware, IoT botnet activity, and the Russia/Ukraine war as key threats in 2022.

Claroty’s research arm (Team82) has uncovered and disclosed two critical vulnerabilities in FileWave’s Mobile Device Management (MDM) system.

Aqua Security has launched out-of-the-box runtime protection with minimal configuration to stop attacks in real-time on running workloads.

Hackers are exploiting security vulnerabilities faster than ever before, with the average time to exploitation down from 42 days to just 12 days.

New Android banking malware, MaliBot, emerges following FluBot takedown. It disguises itself as crypto mining apps and targets mobile banking users.

Flashpoint launches K-12 risk management and security offering to tackle cyber and physical threats facing schools.

A new report has identified a 7.6 per cent increase in the number of vulnerabilities tied to ransomware in Q1 2022.

Vulnerabilities in Lenovo laptops could allow hackers to deploy UEFI malware, according to ESET researchers. Over 100 models are affected.

Russian and Ukraine-themed war documents have become the lure of choice for cyber espionage, according to a new analysis from Check Point Research.

The latest quarterly WatchGuard Threat Lab report shows network attacks at the highest point over the past three years.

Qualys has launched Multi-Vector EDR 2.0 with additional threat-hunting and risk mitigation capabilities, designed to improve alert prioritisation.

Rapid7 has released its latest Vulnerability Intelligence Report detailing the most significant security vulnerabilities and cyber attacks in 2021.

GitHub has released three new features for GitHub Actions to assist teams of all sizes to work faster at scale and enable increased productivity.