Szolgáltatóknak

Poorly governed identities have become a gateway for substantial incidents.

Security pros say this case illustrates why attackers go after third-party providers to penetrate major financial companies like American Express.

Cisco Observability Platform is designed to ingest and process vast amounts of MELT (Metrics, Events, Logs and Traces) data. It is built on top of open standards like OpenTelemetry to ensure interoperability. See how its provision of extensions let you tailor every facet of its functionality to your unique needs.

Cisco continues its focus on FedRAMP® Authorization for our government customers with yet another solution, Cisco Defense Orchestrator (CDO), which has now achieved FedRAMP In-Process status. With Cisco CDO your agency gains an integrated cloud management solution that streamlines and improves efficacy of policy administration across a variety of security solutions. This lets you manage, analyze, and optimize Firewalls (FTD, ASA) across on-premises, virtual, and cloud environments with simplicity, increasing your agency’s effectiveness and compliance.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Human error has been named by chief technology officers around the world to be the most significant security threat against their organizations.

Cybersecurity experts have lauded the National Institute of Standards and Technology's newly released Cybersecurity Framework 2.0 for expanded coverage and additional resources.

Alireza Shafie Nasab has been charged by the U.S. for his involvement in the targeting of more than 200,000 devices in an attempt to hack U.S. government agencies.

Doorbell cameras manufactured by Chinese firm Eken Group were discovered by Consumer Reports to be impacted by several significant security flaws that could be leveraged to achieve unauthorized footage viewing or device takeovers.