IT Brief Australia - Technology news for CIOs & IT decision-makers
Australia

Australian Stories

Security vulnerabilities stories

Global Stories

Security vulnerabilities stories

Claroty's Team82 uncovers two vulnerabilities in FileWave's MDM system
Unified Communications

Claroty's Team82 uncovers two vulnerabilities in FileWave's MDM system

Claroty's research arm (Team82) has uncovered and disclosed two critical vulnerabilities in FileWave's Mobile Device Management (MDM) system.

By Mitchell Hageman • 2 min read • Fri, 29th Jul 2022
Rapid7 unveils new capabilities for InsightCloudSec offering
Risk & Compliance

Rapid7 unveils new capabilities for InsightCloudSec offering

Rapid7 enhances InsightCloudSec with layered context capabilities, providing security teams with a consolidated, real-time view of risk signals.

By Zach Thompson • 3 min read • Wed, 27th Jul 2022
Sophos reveals latest tactics of BlackCat ransomware group
Malware

Sophos reveals latest tactics of BlackCat ransomware group

Sophos has revealed that the ransomware gang BlackCat has added Brute Ratel, a pentesting tool, to its arsenal of attack tools.

By Catherine Knowles • 3 min read • Tue, 19th Jul 2022
Zero-day attacks climb as hackers get more sophisticated
Malware

Zero-day attacks climb as hackers get more sophisticated

Hackers are exploiting security vulnerabilities faster than ever before, with the average time to exploitation down from 42 days to just 12 days.

By Caitlin Condon • 5 min read • Mon, 18th Jul 2022
Secureworks reveals new information on BRONZE STARLIGHT threat group
Malware

Secureworks reveals new information on BRONZE STARLIGHT threat group

New research from Secureworks reveals that Chinese threat group BRONZE STARLIGHT is using targeted ransomware as a smokescreen for cyber espionage.

By Staff Writer • 3 min read • Thu, 30th Jun 2022
Forescout reveals top vulnerabilities impacting OT vendors
IoT Security

Forescout reveals top vulnerabilities impacting OT vendors

Forescout's Vedere Labs has disclosed OT: ICEFALL, naming 56 vulnerabilities affecting devices from 10 operational technology vendors.

By Catherine Knowles • 3 min read • Wed, 29th Jun 2022
Sophos uncovers latest cyber attack trends in Playbook report
Firewalls

Sophos uncovers latest cyber attack trends in Playbook report

Research finds that there has been a 36% increase in cyber attack dwell time, with a median intruder dwell time of 15 days in 2021 versus 11 days in 2020.

By Catherine Knowles • 5 min read • Thu, 9th Jun 2022
New Qualys solution enables better vulnerability management
Risk & Compliance

New Qualys solution enables better vulnerability management

The new cloud-based solution gives insights into an organisation's risk posture along with the ability to use drag and drop workflows to orchestrate responses.

By Catherine Knowles • 4 min read • Thu, 9th Jun 2022
Micro Focus unveils Data Center Automation for SaaS delivery
Software-as-a-Service

Micro Focus unveils Data Center Automation for SaaS delivery

MicroFocus has launched Data Center Automation for SaaS delivery, providing cost-effective vulnerability risk and compliance management.

By Zach Thompson • 3 min read • Wed, 8th Jun 2022
Armis risk management solution hones in on entire attack surface
Risk & Compliance

Armis risk management solution hones in on entire attack surface

Armis' new solution for risk-based vulnerability management enables businesses to prioritise mitigation efforts across the entire asset attack surface.

By Catherine Knowles • 3 min read • Tue, 7th Jun 2022
Elevation of Privilege the top 2021 Microsoft vulnerability
EduTech

Elevation of Privilege the top 2021 Microsoft vulnerability

BeyondTrust's 2022 Microsoft Vulnerabilities Report reveals that Elevation of Privilege is the top vulnerability category for the second year running.

By Zach Thompson • 3 min read • Thu, 26th May 2022
New Relic launches vulnerability management platform
DevOps

New Relic launches vulnerability management platform

New Relic has introduced New Relic Vulnerability Management to help organisations find and address security risks faster and with greater precision.

By Catherine Knowles • 4 min read • Mon, 23rd May 2022
New vulnerabilities found in Nuspire's Q1 2022 Threat Report
Malware

New vulnerabilities found in Nuspire's Q1 2022 Threat Report

Nuspire's Q1 2022 Threat Report reveals surge in threat actor activity as new vulnerabilities emerge. Mirai, STRRAT and Emotet see a resurgence.

By Catherine Knowles • 3 min read • Thu, 19th May 2022
Qualys updates Cloud Platform solution with rapid remediation
Risk & Compliance

Qualys updates Cloud Platform solution with rapid remediation

The new update is designed to enable organisations to fix asset misconfigurations, patch OS and third-party applications, and deploy custom software.

By Catherine Knowles • 3 min read • Thu, 19th May 2022
How zero trust and SD-WANs can support productive remote working
Malware

How zero trust and SD-WANs can support productive remote working

The global pandemic has redefined connectivity, leading to new challenges for IT teams and the need for strong cybersecurity measures.

By Anthony Daniel • 4 min read • Tue, 17th May 2022
Developments in phishing and how to protect your business
Disaster Recovery

Developments in phishing and how to protect your business

Phishing attacks are becoming more organized and dangerous. This article discusses strategies to defend against them.

By Edward Robinson • 3 min read • Mon, 9th May 2022
NCSC, international partners issue cyber security advisory
Advanced Persistent Threat Protection

NCSC, international partners issue cyber security advisory

NCSC issues cyber security advisory with international partners, highlighting 15 most commonly exploited vulnerabilities.

By Zach Thompson • 3 min read • Fri, 29th Apr 2022
Attacks on critical infrastructure continue - Trellix report
AI Security

Attacks on critical infrastructure continue - Trellix report

Individual consumers are the prime target of cyber criminals, followed by the healthcare sector, according to a report by Trellix's Threat Labs.

By Catherine Knowles • 4 min read • Wed, 27th Apr 2022