Apple iOS 12.1.3 Security Updates Address Multiple Vulnerabilities
by Ryan Seguin on January 23, 2019
Apple has released iOS 12.1.3 to fix 31 CVEs including a FaceTime remote code execution vulnerability
Read More
Proof-of-Concept Code Gives Standard Microsoft Exchange Users Domain Administrator Privileges (CVE-2019-0724, CVE-2019-0686)
by Paul Davis on January 22, 2019
Publicly released and newly named “PrivExchange” proof-of-concept (POC) privilege escalation code exploits protocol flaws and default configurations to give standard Exchange users Domain Administrator access.
WEF Report Offers Global Context for Understanding the Importance of Cyber Risk
by Renaud Deraison on January 21, 2019
The World Economic Forum’s Global Risks Report 2019 ranks data fraud/theft and cyber attack as two of the top five global risks in terms of likelihood. The big question now is how will organizations respond?
Data Security Is a Global Economic Imperative
by Renaud Deraison on January 16, 2019
It’s time for government and industry to define and follow a cybersecurity-first approach to protecting the precious data driving global commerce.
Data makes the world go round. It’s the grease keeping the machinery of modern global commerce moving quickly and efficiently. Without it, global supply chains would grind to a halt, stock markets would cease trading, and the simplest of consumer transactions would become untenable.
Cyber Risk Management in Transition: Key Findings from ESG’s Cyber Risk Management Survey
by Kevin Flynn on January 16, 2019
A recent ESG report shows the traditional approach to cyber risk management isn’t working anymore, if in fact it ever did. Here, we share four highlights from the report and offer two steps to help improve your organization’s strategy.
Oracle’s January Critical Patch Update Addresses Nearly 300 Fixes
by Satnam Narang on January 15, 2019
Oracle addresses nearly 300 vulnerabilities in the first Critical Patch Update of 2019.
Background
On January 15, Oracle released its Critical Patch Update, a quarterly publication of fixes for vulnerabilities. This month’s update contains nearly 300 fixes across a number of Oracle products.
Election Systems as Critical Infrastructure: Understanding Help America Vote Act Funding
by Stephen Smith on January 15, 2019
In today's edition of Tenable's State and Local Government Video Blog Series, we discuss how to utilize grant funding to address the top cybersecurity concerns of state CISOs.
Multiple Zero-Days in PremiSys IDenticard Access Control System
by Tenable Research on January 14, 2019
Tenable Research discovered multiple zero-day vulnerabilities in the PremiSys access control system developed by IDenticard. As of January 9, IDenticard has not released a patch for these vulnerabilities.
Tenable Bolsters Government Affairs Team with New Hire
by James Hayes on January 11, 2019
Jamie Brown joins Tenable as Director of Global Government Affairs. In this newly created role, Jamie will work with government officials worldwide to promote effective cybersecurity policies, which enhance security while enabling continued digital transformation and innovation.
Critical Vulnerability Fixes Available For Juniper Devices
by Ryan Seguin on January 10, 2019
Juniper has addressed multiple critical vulnerabilities in Junos, Junos Space, and JATP devices. Administrators are advised to update to the latest OS version on any affected Juniper device.