Sean Michael Kerner

Among the most common risks that enterprises face are email fraud attacks, often referred to as Business Email Compromise. On Feb. 14, Symantec announced its latest innovation to help organizations combat BEC, with the company’s Email Fraud Protection offering. BEC fraud involves attackers somehow spoofing or gaining access to an email system and tricking a […]

With hundreds of specialized sessions, there is always a lot to take in at the annual RSA Conference held in San Francisco.  The 2019 event is set to get under way March 4-8 and will tackle all manner of cyber-security topics ranging from new threats to privacy regulations, emerging technologies and everything in between. Across […]

Palo Alto Networks is boosting its network security platforms with the new PAN-OS 9.0 update that was announced on Feb. 12. PAN-OS is a hardened operating system based on Linux that provides a secure, enterprise grade environment for executing Palo Alto’s network security capabilities. PAN-OS 9.0 includes over 60 new features and tools that can […]

Attivo Networks announced on Feb. 12 that it is expanding its ThreatDefend cyber-security deception platform with its new “The Informer” forensic collection technology. Deception is a class of cyber-security technology that aims to trick attackers with fake services as an approach to help limit risk and expose potential adversaries. With its ThreatDefend Platform, Attivo provides deception-based detection […]

There are a lot of different open-source organizations out there, but none had a bigger year in 2018 than the Cloud Native Computing Foundation (CNCF) and 2019 looks to be no different. The CNCF published its 2018 annual report on Feb. 8 providing an overview of the organization’s activities and growth over the past year. […]

Qualys announced a new patch management application on Feb. 12, providing organizations with the ability to more easily manage the often complex process of keeping infrastructure software updated. Qualys Patch Management (PM) is part of the Qualys Cloud Platform service that runs with a single agent on an endpoint to collect information and manage different […]

A new serious vulnerability in container technology was publicly reported on Feb. 11, one that could potentially enable an attacker to gain unauthorized access to the host operating system. Container technology led by the Docker engine has become increasingly popular in recent years as a way to build and deploy applications into isolated segments, on […]

The Istio service mesh project is an up-and-coming open-source effort that already has the backing of major IT vendors that include IBM, Cisco, Google and Amazon. Istio however isn’t secure by default, which is something that Twistlock is trying to help organizations configure, with a new guide to compliance checks released on Feb. 11. The […]

As attackers become increasingly sophisticated, there is a need for advanced technologies that can detect attacks that traditional tools can’t. That’s the mission for Blue Hexagon, which emerged from stealth on Feb. 5 with a deep learning platform to help automatically detect potential threats. The Blue Hexagon platform offers the promise of near real-time prevention […]

More than a week after the first reports of a critical vulnerability in Apple’s FaceTime messaging application surfaced, an official patch is now available.  As it turns out, however, the FaceTime flaw was one of three different zero-day issues that attackers were actively exploiting in Apple’s iOS mobile operating system. Apple released the iOS 12.1.4 update for […]

Idaptive announced its Next-Gen Access Cloud on Feb. 7, providing organizations with a unified approach for Identity and Access Management (IAM) in the cloud and on-premises. The Next-Gen Access Cloud integrates multiple components including single sign-on (SSO), multi-factor authentication (MFA) and user behavior analytics (UBA) to help organizations with access requirements. The new release is […]

Cyber-security startup Netography emerged from stealth on Feb. 7 with a new technology approach to help organizations defend against the risk of distributed denial-of-service (DDoS) attacks. DDoS attacks typically involve large volumes of attack bandwidth that overwhelm services, rendering them unavailable. Defending against DDoS is, however, about more than simply having more bandwidth available than […]