Sean Michael Kerner

7 Surprising Findings From Akamai’s 4Q13 State of the Internet Report by Sean Michael Kerner China Is the Leading Source of Attack Traffic According to Akamai, China was the top originating country for attack traffic in the fourth quarter of 2013, representing 43 percent of all attack traffic. Port 445 Is the Most Attacked Port […]

Microsoft is warning its users about a new unpatched security vulnerability that affects multiple versions of the Internet Explorer Web browser. Microsoft issued security advisory 2963983 on April 26, detailing the flaw that is now identified as CVE-2014-1776. The impact of CVE-2014-1776 is widespread in that IE versions 6, 7, 8, 9, 10 and 11 […]

Open-source Firefox browser vendor Mozilla is looking to improve security with a new certificate validation library set to debut in Firefox 31 later this year. Certificates are widely used on the Internet today for Secure Socket Layers (SSL) encryption as a way to secure data in motion. Since its inception, Firefox has used technology known […]

The open-source Docker container virtualization technology is getting a major boost that could serve as affirmation of its practical utility and may also help to accelerate adoption. In the cloud world, Werner Vogels is a person to whom many people look for guidance and direction. Vogels is the CTO of Amazon and has played a […]

The Linux Foundation has assembled many of the world’s leading IT vendors together in a new effort to fund core infrastructure projects and help prevent another Heartbleed from ever happening again. Participants in the Core Infrastructure Initiative, led by the Linux Foundation, include VMware, Rackspace, NetApp, Microsoft, Intel, IBM, Google, Fujitsu, Facebook, Dell, Amazon and […]

The Heartbleed flaw might represent a real risk to 150 million Android users, not because they’re using a vulnerable version of Android, but rather because they are running a vulnerable app. That’s a new finding from security firm FireEye, based on an examination of code running in Android apps. The Heartbleed flaw is a vulnerability […]

Apple is updating its iOS mobile operating system, the OS X desktop operating system and the firmware on the Airport WiFi access point for security vulnerabilities with a series of security updates released on April 22. Among the patched issues, several affect both iOS and OS X, one of which is a fix for the […]

Although Verizon’s annual Data Breach Investigations Report (DBIR), which came out today, includes lots of specific data points, one of the key observations is that attacks vary based on specific industry sectors. Overall, the 2014 DBIR received data from 63,437 security incidents of which 1,367 were confirmed data breaches. Verizon senior analyst and DBIR co-author […]

Though the cloud offers a different deployment and consumption model for computing services, many of the same security risks present in non-cloud IT deployments are still in play. That’s the general conclusion of the Spring 2014 State of Cloud Security Report from cloud security-as-a-service vendor Alert Logic. “With the growing adoption of the cloud, we […]

OpenStack Icehouse Cloud Debuted With Heavyweight Support by Sean Michael Kerner Number of OpenStack Contributors Up Sharply Over the last two years, the number of developers authoring and committing code to OpenStack has grown from 248 authors and 4,083 code commits in the April 2012 OpenStack Essex release to 1,202 authors and 17,209 code commits […]

The OpenSSL project has come under intense scrutiny in recent weeks due to the Heartbleed vulnerability. While the OpenSSL Foundation has publicly asked for more money to help fuel development, a new option to push OpenSSL forward is now getting started. In the open-source development model, when disputes happen and one group wants to take […]

The Heartbleed security flaw remains a risk to enterprises, two weeks after first being publicly disclosed. The Heartbleed bug is technically a security vulnerability in the open-source OpenSSL cryptographic library, which is widely used on Web servers and embedded devices. The OpenSSL project provided a patch for the Heartbleed flaw on April 7, and organizations […]