Sean Michael Kerner

In a rare confluence of scheduling and circumstances, Adobe, Microsoft and Oracle issued patches on July 14 for vulnerabilities first publicly revealed July 5 in the breached documents of security firm Hacking Team. Adobe’s Patch Tuesday update includes fixes for the CVE-2015-5122 and CVE-2015-5123 zero-day vulnerabilities that FireEye and Trend Micro found in the Hacking […]

Privately held security vendor CounterTack acquired ManTech Cyber Solutions International (MCSI), the security division of ManTech International (Nasdaq:MANT). MCSI offers security products with the Digital DNA framework technology sitting at the core. Digital DNA powers the MCSI Responder Pro in-memory forensics application as well as MCSI’s Active Defense malware detection and analysis platform. CounterTack is […]

IBM is in the midst of a major transformation in its systems business as it moves away from x86. Part of that transformation involves refocusing the company’s Linux strategy to be centered on IBM’s Power Systems, an effort that Doug Balog, general manager of IBM Power Systems, is helping to lead. In a video interview […]

With two currently unpatched zero-day vulnerabilities in Adobe’s Flash Player, Mozilla has decided that enough is enough and it’s blocking Flash usage in the Firefox Web browser. “All versions of Adobe’s Flash Player plugin are currently deactivated by default, until Adobe releases an updated version to address known critical security issues,” Mozilla states in a […]

The idea of using a honeypot, a deliberately attractive and vulnerable server as a way to trap attackers, is not new, but it’s a concept that security vendor TrapX is aiming to expand upon with its deception-based technology platform.TrapX announced July 10 that it raised $9 million in Series B funding from Intel Capital, Liberty […]

Security firm CrowdStrike today announced that it has closed a Series C round of funding for $100 million led by Google Capital and including the participation of Rackspace, Accel and Warburg Pincus. The new investment will be used by CrowdStrike to expand the company’s geographic footprint into Europe and Asia, as well as fund further […]

Adobe just can’t seem to get any respite from the seemingly endless onslaught of zero-day vulnerabilities being discovered in its much maligned Flash Player. Adobe is set to patch two new zero-day Flash vulnerabilities this week, both of which were discovered in the data dump from the breach of Italian security vendor Hacking Team. Hacking […]

The hacker group known as Wild Neutron is still actively attacking companies around the world, a number of years after the group was first discovered in 2011. Both Kaspersky Lab and Symantec have reported renewed activity from Wild Neutron (Symantec now refers to the group as “Butterfly”) this year. Wild Neutron/Butterfly has been implicated by […]

Amazon’s AWS Summit Accelerates Cloud Services by Sean Michael Kerner Werner Vogels Takes the Stage Amazon CTO Werner Vogels led the AWS Summit event in New York City, detailing use cases for the cloud and announcing new services. AWS Has Over 1 Million Active Users The cloud isn’t just a buzzword for Amazon; it’s a […]

After weeks of speculation that the data breach of the U.S Office of Personnel Management’s systems affected more people than was initially disclosed, OPM publicly admitted on July 9 that an additional 21.5 million Americans were indeed impacted. OPM first disclosed on June 4 that it had been breached, though initially the U.S government agency […]

In the aftermath of the Heartbleed security vulnerability in April 2014, the Linux Foundation set up the Core Infrastructure Initiative (CII) to help fund and support critical open-source projects. Now more than a year later, CII is funding the Census Project to better identify and score potentially vulnerable open-source projects that could benefit from CII’s […]

The open-source OpenSSL cryptographic library project came out today with a high-severity security advisory and patched a single vulnerability, identified as CVE-2015-1793. OpenSSL is a widely used technology that helps to enable Secure Sockets Layer/Transport Layer Security (SSL/TLS) encryption for Web data transport for both servers and end-user devices. The CVE-2015-1793 advisory, titled “Alternative chains […]