For providers

Apple today released iOS 17.4 as well as iOS 16.7.6 (and the respective iPadOS versions). These updates fix a total of four vulnerabilities. Two of the vulnerabilities are already being exploited. CVE-2024-23225 is a privilege escalation issue and only affects iOS 17 as well as iOS 16. The second already exploited vulnerability, CVE-2024-23296, only affects iOS 17.

TeamCity servers risk being exposed to “complete compromise” if patch isn’t installed, researchers warned.

See how developers can utilize the Investigate API to enhance the data in their Security Information and Event Management (SIEM) systems, threat intelligence platforms, or incident management workflows.

The last few years have been great for attackers exploiting basic web application vulnerabilities. Usually, home and small business products from companies like Linksys, D-Link, and Ubiquity are known to be favorite targets. But over the last couple of years, enterprise products from companies like Ivanti, Fortigate, Sonicwall, and Citrix (among others) have become easy to exploit targets. The high value of the networks protected by these "solutions" has made them favorites for ransomware attackers.

Kubernetes Security Operations Center announced the rollout of a zero-trust policy generator designed to simplify the task of managing role-based access controls for Kubernetes clusters.

The cyber resilience offering will include strategies for recovering from adverse incidents including cyberattacks such as ransomware.

Votiro Cybersec has launched a new unified platform for data detection and response that can extend its protection to include data in files that are in transit across an organization.

When a stub zone is configured in named it seems to not work (and the resolver that has the stub zone responds SERVFAIL to client queries for names in that zone) if the target servers in the primaries server list are configured with minimal-responses yes; (or similar, if the target servers are not BIND). The process for populating a stub zone from the primaries list is: Do SOA refresh query Check serial number If needed, refresh the zone. So far, this is the same as when handling a secondary z ...

Cloudflare announced that users of its Application Security Advanced offering will receive an improved web application firewall designed to defend applications that run large language models.