Software Contract Solutions

Cisco directs high priority patches for IP phone security exposures

Cisco warns on SIP vulnerabilities in 8800 and 7800 series IP business phones. Cisco this week advised customers using its 7800 and 8800 series IP phones they should patch a variety of high-priority vulnerabilities that could lead to denial of service and other security problems. The company issued five security advisories, four for the 8800 … Read more

Cyber attackers favoring stealthier attacks, says Darktrace

Cyber attackers are moving away from ransomware to stealthier tactics, including banking Trojans and cryptojacking, an analysis of attack data reveals. Cyber criminals are switching away from ransomware to stealthier attacks as the main sources of generating revenue, according to analysis by British artificial intelligence (AI)-based cyber security firm Darktrace. The firm’s latest cyber threat landscape report is based on … Read more

Cisco warns a critical patch is needed for a remote access firewall, VPN and router

Cisco puts Elasticsearch cluster, Docker/Kubernetes, Webex customers on guard, as well. Cisco is warning organizations with remote users that have deployed a particular Cisco wireless firewall, VPN and router to patch a critical vulnerability in each that could let attackers break into the network. The vulnerability, which has an impact rating of 9.8 out of … Read more

Edge security: There’s lots of attack surfaces to worry about

Making edge computing safe means applying sound security principles to the unique edge environment. The problem of edge security isn’t unique – many of the issues being dealt with are the same ones that have been facing the general IT sector for decades. But the edge adds its own wrinkles to those problems, making them, … Read more

Cisco warns on HyperFlex security vulnerabilities

Weaknesses in Cisco’s HyperFlex hyperconverged data-center gear could allow command-injection exploits. Cisco this week identified two “High” security vulnerabilities in its HyperFlex data-center package that could let attackers gain control of the system. HyperFlex is Cisco’s hyperconverged infrastructure that offers computing, networking and storage resources in a single system. The more critical of the two warnings – … Read more

What is CIO best practice when it comes to cloud security?

As businesses increasingly adopt cloud-first strategies, how can they ensure their security is up to scratch? Modern businesses continue to invest more heavily in the cloud than ever before. Global enterprise spending on cloud services is projected to grow by 17.3% in 2019 to total $206.2bn, up from $175.8bn in 2018, according to analyst Gartner. While the cloud … Read more

Cisco patches serious SD-WAN software security holes

The Cisco SD-WAN security problems were part of 23 security advisories Cisco announced on Jan. 23. Cisco has patched security vulnerabilities in four packages of SD-WAN Solution software that address buffer overflow, arbitrary file override and privilege access weaknesses that could have led to denial-of-service attacks or access problems. The first patch, called “Critical” by … Read more

Microsoft Patch Alert: Mystery patches for IE and Outlook 2013 leave many questions, few answers

With much of the Windows blogosphere in full Chicken Little mode over an undisclosed bug in Internet Explorer – and reports of problems with that patch – we’ve seen a reasonably tranquil patching month erupt in holiday-season glitter. Just when you’re ready to settle in for some egg and nog and whatever may accompany, Windows … Read more

How to protect Windows 10 PCs from ransomware

Ransomware is running rampant these days, but there are several ways Windows 10 users and admins can protect their PCs. Here’s what to do. CryptoLocker. WannaCry. Petya. Bad Rabbit. The ransomware threat isn’t going away anytime soon; the news brings constant reports of new waves of this pernicious type of malware washing across the world. It’s popular … Read more

Mac malware makes debut in top 10 list

Mac malware appears in the WatchGuard top 10 malware list for first time, and 6.8% of major websites still use an insecure SSL protocol, according to the firm’s latest internet security report. Mac scareware is in sixth place on WatchGuard’s top 10 malware list for the third quarter of 2018, according to the firm’s latest internet security report. … Read more