vulnerability management

Cisco Vulnerability Management Named a Leader in Omdia Universe: RBVM Solutions, 2023

Posted on by Admin
Cisco Vulnerability Management Named a Leader in Omdia Universe: RBVM Solutions, 2023

Omdia released its 2023 Omdia Universe: Risk-Based Vulnerability Management Solutions report, and we’re excited to say that Cisco Vulnerability Management (formerly Kenna.VM) is recognized as a Leader! Risk-based Vulnerability Management (RBVM) builds upon the legacy vulnerability management market with stronger vulnerability prioritization and response. RBVM tackles the problem of determining which vulnerabilities pose a real risk in your environment and need to be patched versus which vulnerabilities you can safely de-prioritize. Improving the efficiency and…

Read More

Vulnerabilities on external attack surfaces live far too long

Posted on by Admin
Vulnerabilities on external attack surfaces live far too long

Vulnerabilities on external attack surfaces live far too long | Security Magazine This website requires certain cookies to work and uses other cookies to help you have the best experience. By visiting this website, certain cookies have already been set, which you may delete and block. By closing this message or continuing to use our site, you agree to the use of cookies. Visit our updated privacy and cookie policy to learn more. This…

Read More

VERT Threat Alert: August 2023 Patch Tuesday Analysis

Posted on by Admin
VERT Threat Alert: August 2023 Patch Tuesday Analysis

Today’s VERT Alert addresses Microsoft’s August 2023 Security Updates, which includes a recently introduced release notes format. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1068 on Wednesday, August 9th. In-The-Wild & Disclosed CVEs CVE-2023-38180 A vulnerability in Kestrel could allow for a denial of service. Kestrel is the cross-platform web server that is included with (and enabled by default in) ASP.NET Core. When detecting a potentially malicious client, Kestrel…

Read More

VERT Threat Alert: July 2023 Patch Tuesday Analysis

Posted on by Admin
VERT Threat Alert: July 2023 Patch Tuesday Analysis

Tag CVE Count CVEs Windows Image Acquisition 1 CVE-2023-35342 Windows Netlogon 1 CVE-2023-21526 Microsoft Power Apps 1 CVE-2023-32052 Windows Remote Desktop 3 CVE-2023-32043, CVE-2023-35332, CVE-2023-35352 Windows Error Reporting 1 CVE-2023-36874 Windows PGM 1 CVE-2023-35297 Windows CryptoAPI 1 CVE-2023-35339 Windows Cryptographic Services 1 CVE-2023-33174 Windows Installer 2 CVE-2023-32050, CVE-2023-32053 Windows CDP User Components 1 CVE-2023-35326 Windows Transaction Manager 1 CVE-2023-35328 Windows Admin Center 1 CVE-2023-29347 Windows Authentication Methods 1 CVE-2023-35329 Windows Server Update Service 2 CVE-2023-35317,…

Read More

VERT Threat Alert: June 2023 Patch Tuesday Analysis

Posted on by Admin
VERT Threat Alert: June 2023 Patch Tuesday Analysis

Tag CVE Count CVEs Windows Installer 1 CVE-2023-32016 Windows Hyper-V 1 CVE-2023-32013 Microsoft Power Apps 1 CVE-2023-32024 Windows Group Policy 1 CVE-2023-29351 Remote Desktop Client 2 CVE-2023-29352, CVE-2023-29362 Visual Studio 9 CVE-2023-33139, CVE-2023-29012, CVE-2023-29011, CVE-2023-25815, CVE-2023-29007, CVE-2023-25652, CVE-2023-27909, CVE-2023-27910, CVE-2023-27911 Microsoft Dynamics 1 CVE-2023-24896 Microsoft Office Outlook 1 CVE-2023-33131 Windows Hello 1 CVE-2023-32018 Windows Collaborative Translation Framework 1 CVE-2023-32009 Microsoft Office SharePoint 5 CVE-2023-29357, CVE-2023-33129, CVE-2023-33130, CVE-2023-33132, CVE-2023-33142 Windows PGM 3 CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 Microsoft…

Read More

Improving IT security through cross-department collaboration

Posted on by Admin
Improving IT security through cross-department collaboration

Improving IT security through cross-department collaboration | Security Magazine This website requires certain cookies to work and uses other cookies to help you have the best experience. By visiting this website, certain cookies have already been set, which you may delete and block. By closing this message or continuing to use our site, you agree to the use of cookies. Visit our updated privacy and cookie policy to learn more. This Website Uses CookiesBy…

Read More

VERT Threat Alert: May 2023 Patch Tuesday Analysis

Posted on by Admin
VERT Threat Alert: June 2023 Patch Tuesday Analysis

Today’s VERT Alert addresses Microsoft’s May 2023 Security Updates, which include a new release notes format. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1055 on Wednesday, May 10th. In-The-Wild & Disclosed CVEs CVE-2023-29336 Up first this month is a vulnerability reported by Avast in Win32k. This vulnerability could allow an authenticated attacker to elevate their privileges to SYSTEM. This vulnerability has seen active exploitation. CVE-2023-24932 This vulnerability allows an…

Read More

VERT Threat Alert: April 2023 Patch Tuesday Analysis

Posted on by Admin
VERT Threat Alert: June 2023 Patch Tuesday Analysis

Tag CVE Count CVEs Microsoft PostScript Printer Driver 1 CVE-2023-28243 Windows RPC API 3 CVE-2023-21727, CVE-2023-21729, CVE-2023-28297 Windows Secure Socket Tunneling Protocol (SSTP) 1 CVE-2023-28241 Windows Error Reporting 1 CVE-2023-28221 Microsoft Office Word 1 CVE-2023-28311 Windows Transport Security Layer (TLS) 1 CVE-2023-28234 Microsoft Printer Drivers 11 CVE-2023-24924, CVE-2023-24883, CVE-2023-24925, CVE-2023-24884, CVE-2023-24926, CVE-2023-24885, CVE-2023-24927, CVE-2023-24886, CVE-2023-24928, CVE-2023-24887, CVE-2023-24929 Windows Group Policy 1 CVE-2023-28276 Azure Machine Learning 1 CVE-2023-28312 Windows Netlogon 1 CVE-2023-28268 Microsoft Dynamics 2 CVE-2023-28309,…

Read More

Log4j bug being used in new malicious attacks

Posted on by Admin
Log4j bug being used in new malicious attacks

Log4j bug being used in new malicious attacks | Security Magazine This website requires certain cookies to work and uses other cookies to help you have the best experience. By visiting this website, certain cookies have already been set, which you may delete and block. By closing this message or continuing to use our site, you agree to the use of cookies. Visit our updated privacy and cookie policy to learn more. This Website…

Read More

VERT Threat Alert: March 2023 Patch Tuesday Analysis

Posted on by Admin
VERT Threat Alert: August 2023 Patch Tuesday Analysis

Tag CVE Count CVEs Windows HTTP Protocol Stack 1 CVE-2023-23392 Microsoft PostScript Printer Driver 18 CVE-2023-24856, CVE-2023-23406, CVE-2023-23413, CVE-2023-24857, CVE-2023-24858, CVE-2023-24863, CVE-2023-24864, CVE-2023-24866, CVE-2023-24906, CVE-2023-24867, CVE-2023-24907, CVE-2023-24868, CVE-2023-24909, CVE-2023-24870, CVE-2023-24911, CVE-2023-24872, CVE-2023-24913, CVE-2023-24876 Internet Control Message Protocol (ICMP) 1 CVE-2023-23415 Windows Cryptographic Services 1 CVE-2023-23416 Visual Studio 4 CVE-2023-22490, CVE-2023-23946, CVE-2023-22743, CVE-2023-23618 Microsoft Dynamics 6 CVE-2023-24919, CVE-2023-24879, CVE-2023-24920, CVE-2023-24921, CVE-2023-24922, CVE-2023-24891 Windows TPM 2 CVE-2023-1017, CVE-2023-1018 Microsoft Office SharePoint 1 CVE-2023-23395 Remote Access Service Point-to-Point…

Read More
1 2 3 4