Sean Michael Kerner

A new study conducted by Osterman Research and sponsored by Trustwave provides insight into the challenge of shelfware. Shelfware describes software that sits on the shelf, instead of being properly utilized. The study was conducted in November 2014 and included responses from 172 IT decision-makers and influencers. “The respondents to the survey were IT professionals […]

Mozilla’s open-source Firefox 35 Web browser became generally available on Jan. 13, providing users with new Web-based communication features and fixes for nine security advisories. The Firefox Hello WebRTC (Web Real Time Communications) feature officially debuted in the Firefox 34 release in December 2014 and is now being enhanced with new capabilities. In Firefox 35, […]

CloudPassage is expanding its Halo security platform to help secure Docker container deployment. The open-source Docker container virtualization technology has become increasingly popular for building, packaging and deploying applications. As Docker deployments grow, there is a need to make sure that proper enterprise security policy is applied, and the CloudPassage Halo system is aimed at […]

Microsoft on Jan. 13 rolled out its first Patch Tuesday update of the new year, which included eight security bulletins, with one rated as having critical severity. Among the fixed vulnerabilities is a zero-day flaw impacting Windows that was first publicly disclosed by Google on Dec. 30, 2014. The flaw that was disclosed by Google […]

State of the Internet Report Sheds Light on Internet Trends, Attacks by Sean Michael Kerner China Still Dominates as Top Location for Attackers Once again, China has been identified as the top originating country by IP address for attack traffic. Telnet (Port 23) Is the Most Attacked Server Port In a shift from the second […]

Ionic Security announced today that it has raised a Series C round of funding that brought in $40.1 million. Total funding to date for the security startup now totals $78.1 million as it builds out its vision of creating a new enterprise security policy platform for data security. The idea behind Ionic Security was initially […]

Heartland Payment Systems is so confident in the security of its payment processing technology that, on Jan. 12, it announced a new breach warranty for its users. The warranty program will reimburse merchants for costs incurred from a data breach that involves the Heartland Secure credit card payment processing system. The new warranty from Heartland […]

Red Hat is developing a new milestone release of its OpenShift platform-as-a-service (PaaS) technology that will shift the platform to Docker containers and Kubernetes orchestration. The upcoming OpenShift 3 platform will mark yet another page in the continued evolution for Red Hat’s PaaS effort that began with the acquisition of Makara in 2010. The original […]

The security landscape in 2015 is already shifting, as organizations big and small try to avoid ending up as a victim of a data breach like the one that took a toll on Sony Pictures. The impact of the Sony breach is being felt at Hewlett-Packard as the company aims to protect itself and its […]

For the last decade, every Microsoft Patch Tuesday was preceded by a Microsoft Advance Notification Service (ANS) update. In an unexpected move, Microsoft announced on Jan. 8 that it is ending the free general public availability of ANS, which will only be available to Microsoft premier customers and members of its security programs. ANS provided […]

The race to the cloud is continuing to accelerate, with more cloud apps than ever now being used by enterprises, according to the January 2015 Netskope Cloud Report. According to the report, the analysis was derived from “tens of billions of events seen across millions of users” in the Netskope Active Platform, a product used […]

Jeff Forristal has been busy the last few years discovering and reporting Android vulnerabilities. Forristal, CTO of mobile security vendor Bluebox Security, revealed the Android Master Key vulnerability at the Black Hack 2013 conference and the FakeID vulnerability in 2014. The two security flaws could have potentially enabled malicious apps to be installed on user […]