Sean Michael Kerner

F5 Networks announced updates to its SSL Orchestrator and Access Manager products on July 25, providing enhanced security capabilities. The SSL Orchestrator 4.0 update helps organizations more efficiently process encrypted traffic with policy-based management capabilities. The new Access Manager 14.1 update is based on technology currently available in the F5 BIG-IP Access Policy Manager (APM); however, […]

Enterprise resource planning (ERP) applications are critical to the operations of many organizations but are increasingly coming under attack, according to a new report. The 30-page ERP Applications Under Fire report was released on July 25 as a joint effort from Onapsis and Digital Shadows. Among the high-level findings in the report is that there has […]

Mocana is set to announce on July 25 that it is supporting the Trusted Platform Module 2.0 standard to help improve the security of embedded devices that make up the internet of things. The TPM 2.0 standard enables organizations to provide cryptographic assurance about software delivery. TPM 2.0 support on the Mocana platform also enables new […]

PureSec disclosed on July 24 that it reported a pair of vulnerabilities in the Apache OpenWhisk serverless runtime that potentially could have left users at risk. Apache OpenWhisk is an open-source project that serves as the basis for the IBM Cloud Functions service as well. The two flaws—CVE-2018-11756 and CVE-2018-11757—could have enabled a remote attacker to […]

The National Institute of Standards and Technology is working on updating its recommendations for how organizations and developers can keep mobile applications secure. The updated recommendations are being made to the Special Publication (SP) 800-163, Vetting the Security of Mobile Applications document that was initially released in January 2015. The 50-page draft revision includes additional […]

Pulse Secure will launch its new Pulse Policy Secure 9.0 release on July 24, providing organizations with enhanced network access control (NAC) capabilities. With the new update, Pulse Secure is improving its visibility into internet of things (IoT) devices to help organizations set policies and secure access. Pulse Secure is also expanding its integration with […]

Jason Brvenik, chief technology officer at NSS Labs, spends his time testing a lot of different security technologies in an effort to evaluate vendor claims and product efficacy. The most recent set of technologies tested by NSS Labs are next-generation firewalls (NGFWs), with test results published on July 17. Among the products tested by NSS […]

Internet of things (IoT) security vendor Armis released new research on July 20, estimating that approximately 496 million devices used by enterprises are at risk from DNS rebinding attacks. The Armis research follows research published in June that found consumer devices were at risk of DNS rebinding attacks. Armis looked at enterprise devices to see if […]

Red Hat is updating its Ansible Engine technology with the new 2.6 release that became generally available on July 17. New features in Ansible Engine 2.6 support automation across multicloud application deployments. Enhanced networking features in Ansible now make it easier for organizations to support different types of software-defined networking (SDN). In addition, Red Hat […]

Barracuda Networks announced on July 19 that it is extending its CloudGen WAF (Web Application Firewall) to the Google Cloud Platform, helping GCP users defend against threats. The CloudGen WAF is now available across all three major public cloud providers—Amazon Web Services, Microsoft Azure and now GCP. The WAF technology helps organizations defend against distributed […]

Oracle released its latest Critical Patch Update on July 18, fixing 334 vulnerabilities across the company’s product portfolio. The company rated 61 of the vulnerabilities as having critical impact. Among the products patched by Oracle are Oracle Database Server, Oracle Global Lifecycle Management, Oracle Fusion Middleware, Oracle E-Business Suite, Oracle PeopleSoft, Oracle Siebel CRM, Oracle […]

Mimecast announced on July 18 that it is developing a new Domain Name System security gateway that is now available to members of the company’s early adopter program. The DNS Security Gateway is an expansion of the Mimecast portfolio beyond the company’s email security services that protect against spam and phishing attacks. With the DNS Security […]