Sean Michael Kerner

2018 was a big year for security vulnerabilities, and 2019 is on track to be even bigger, according to Trend Micro’s Zero Day Initiative. ZDI is in the business of acquiring vulnerabilities from security researchers and then responsibly reporting them to vendors. In 2018, ZDI published 1,444 security advisories, which was 42 percent more than […]

Security technology on cloud servers is supposed to help block and prevent the installation of malware, but what happens when attackers figure out how to uninstall security technology as part of a hacking campaign?  According to a report released on Jan. 17 by Palo Alto Networks’ Unit 42 security research division, that’s exactly what the […]

Barracuda announced an update to its Total Email Protection platform on Jan. 17, providing organizations with new Forensics and Incident Response capabilities. Total Email Protection is Barracuda’s flagship email platform that integrates multiple capabilities including email threat prevention as well as an advanced artificial engine that can mitigate the risk of spear phishing attacks. The […]

The open-source Kubernetes container orchestration system is increasingly becoming a core foundational component that enables the emerging multicloud world. It’s a world that VMware is positioning itself to take a leading role in, thanks in part to the acquisition of Heptio, a firm that was created by the founders of Kubernetes itself. VMware announced the […]

Oracle released its first Critical Patch Update for 2019 on Jan. 15, providing patches for 284 vulnerabilities. The January 2019 CPU addresses security vulnerabilities found across the Oracle software portfolio, including ones affecting database, middleware, Java, PeopleSoft, Siebel and E-Business Suite applications. Thirty-three of the vulnerabilities are identified as being critical with a Common Vulnerabilities Scoring […]

Startup Sonrai Security officially launched on Jan. 15, introducing its Cloud Data Control Service in an effort to improve security for enterprise data assets stored across multiple clouds. The Sonrai Cloud Data Control Service provides multiple features to help organizations improve security, including discovery of data assets as well as classification capabilities. The Sonrai platform […]

Synopsys announced on Jan. 15 that a new version of its Coverity Static Application Security Testing (SAST) technology is now available, providing organizations with enhanced software vulnerability analysis capabilities. Static analysis is an approach where code is examined for potential risks and vulnerabilities before operating in a runtime environment. With the Coverity 2018.12 update, organizations […]

Among the most widely used tools by security researchers is the open-source Metasploit Framework, which has now been updated with the new 5.0 release. Metasploit Framework is penetration testing technology, providing security researchers with a variety of tools and capabilities to validate the security of a given application or infrastructure deployment. With Metasploit, researchers can […]

Security firm CyberArk reported on Jan. 14 that it discovered a security risk on the popular Play-with-Docker site that could have potentially enabled an attacker to get access to the host system’s resources. CyberArk responsibly disclosed the issue to the Play-with-Docker maintainers and the issue has now been fixed. The purpose of the Play-with-Docker (PWD) […]

Enterprise resource planning software is a business-critical application for many organizations, and when moving to the cloud from on-premises deployments, there are some key security concerns that need to be considered, according to a study from the Cloud Security Alliance. The CSA study, titled Enterprise Resource Planning (ERP) Applications and Cloud Adoption, was sponsored by […]

Red Hat announced the general availability of Ansible Tower 3.4 on Jan. 9, providing enterprises with updated capabilities for automating workflows on-premises and in the cloud. Among the new capabilities in Red Hat Ansible Tower 3.4 is increased scalability with a job slicing feature that enables workloads to be more distributed. Security has been enhanced […]

Trustwave announced the latest iteration of its email security platform on Jan. 10 with the unveiling of Secure Email Gateway (SEG) 8.2. Among the highlights in the new release is support for the Microsoft Azure Rights Management System (RMS), which is used to protect against data loss and unauthorized access. Trustwave is also integrating a […]