For providers

As cyber insurance gets more expensive and competitive, security decision-makers have actionable opportunities to strengthen their cyber defenses.

As Senior Vice President for Partnerships and Small & Medium Business, Rodney will empower Cisco’s global ecosystem of partners to maximize the massive opportunities in the Small and Medium Business segment.

Last week, Atlassian published an advisory for CVE-2023-22518. The vulnerability is a trivial to exploit authentication bypass vulnerability [1]. Atlassian emphasized the importance of the advisory with a quote from its CISO: "There are no reports of active exploitation at this time; customers must take immediate action to protect their instances." On Friday, Atlassian confirmed that attackers are actively exploiting the vulnerability.

Cisco Partner Summit 2023 marks a significant moment—and the ideal stage for us to proudly unveil the victors of Cisco's sixth annual global Partner Innovation Challenge. It's an opportunity to shine a well-deserved spotlight on the remarkable innovation flowing from the exceptional talent within our partner community.

Today, CISA published When to Issue Vulnerability Exploitability eXchange (VEX) Information, developed by a community of industry and government experts with the goal to offer some guidance and structure for the software security world, including the large and growing global SBOM community. This guide explains the circumstances and events that could lead an entity to issue VEX information and describes the entities that create or consume VEX information. Whether, and when, to issue VEX information is a business decision for most suppliers and possibly a more individual decision for independent open source developers. This document identifies factors that influence the decision. For more information, read the new reference material When to Issue Vulnerability Exploitability eXchange (VEX) Information.

The tactics of cyberwarfare are spreading to corporate organizations – here’s what security teams should look for.

Understanding API security risks isn't just a good idea — it's a business imperative. A single API breach can lead to financial losses and reputational damage.

APIs enable cloud transformation but bring security risks, demanding robust, adaptive strategies to safeguard data and operations.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.