Sean Michael Kerner

The U.S. Department of Justice announced on March 21 that it is charging a lone individual in connection with a business email compromise scam that resulted in the theft of more than $100 million from a pair of U.S. corporations. The DOJ charges come as new research indicates that business email compromises are an increasingly […]

HashiCorp released its Vault Enterprise 0.7 update on March 21, providing organizations with new capabilities to help securely manage application secrets across a distributed platform. Secrets in an enterprise security context refers to application tokens, passwords and user access, as well as privileged account management. It is not generally considered safe for organizations to embed […]

Last year saw solid improvement for Android security, according to Google’s Android Security 2016 Year in Review report, which was released March 22. The 71-page report provides extensive details on Google’s progress on improving update rates, detecting potential risks and reducing the number of potentially harmful applications (PHAs) on Android devices. “A lot of the […]

Red Hat launched Red Hat Enterprise Linux 6.9 on March 21, providing users of its older operating system with an incremental update boasting improved security capabilities. Although the leading edge of Red Hat’s enterprise platform is currently the RHEL 7.x branch, Red Hat continues to bring new features to RHEL 6.x as well. It first […]

10 Vendors Jumping on the Kubernetes Bandwagon Since Google founded the open-source Kubernetes container management and orchestration project in 2014, the project has seen significant growth. In September 2015, the project hit its 1.0 milestone, and Google donated it to the Linux Foundation’s Cloud Native Computing Foundation (CNCF), where it has continued to be developed. […]

The open-source Docker container project held events around the globe last week as it celebrated its fourth birthday. Docker is more popular than ever as the standard bearer for the container microservices DevOps movement, though Docker Inc. as a company now faces more challenges than ever before as well. Three years ago, I wrote about […]

Virtualization hypervisor technology is supposed to isolate virtual machines from the underlying operating system. Yet on the final day of the 10th anniversary Pwn2Own hacking challenge on March 17, two teams of security researchers—360 Security and Tencent Security Team Sniper—were each able to escape the security isolation that virtualization is supposed to provide. The three-day […]

On the second day of the 10th annual Pwn2Own hacking competition, researchers demonstrated an unparalleled number of zero-day exploits in fully patched operating systems and web browsers. By the time the dust had clear late in the day on March 16, 11 out of 17 attempts at exploiting systems were successful, with researchers walking away […]

Online Fraud: What Tools, Techniques the Fraudsters Use Online fraud can take many forms and comes from any number of sources. Security firm DataVisor is in the business of helping organizations limit fraud risks, and the company’s research unit DataVisor Threat Labs actively tracks trends in the online security space across the 1 billion users […]

The Pwn2Own hacking competition began on March 15, and security researchers have already successfully exploited Ubuntu Linux, Microsoft Edge, Apple Safari and Adobe Reader. In total, Trend Micro’s Zero Day Initiative (ZDI), which operates the contest, has awarded researchers $233,000 for their efforts. The Pwn2Own 2017 event marks the 10th year for the annual hacking […]

Enterprise software giant SAP released its monthly patch update for March this week, providing users with 25 new security notes in addition to updates for two existing notes. In SAP’s nomenclature, a security note is what most other vendors refer to as a security advisory, with added information for risk mitigation. Among the standout issues […]

Twitter users around the world have been impacted by a hack perpetrated by Turkish activists early on Wednesday morning. The attack included the Turkish activist attackers posting swastikas along with messages supporting Turkish president Recep Tayyip Erdogan. Among the high-profile Twitter accounts impacted by the attack were BBC North America, European Parliament, Amnesty International, Forbes, […]