Patch/Configuration Management

This month’s Patch Tuesday from Microsoft comes just days after out-of-band updates were released to address PrintNightmare and other vulnerabilities.

The vulnerabilities were fixed according to Rapid7’s vulnerability disclosure process and were patched in recent releases of Sage X3 Version 9.

Failure to patch could lead to what one researcher described as "a catastrophic security incident such as data theft, financial fraud, or ransomware.”

Today’s columnist, Tim Erlin of Tripwire, says while Amazon may change some default security configurations now that Adam Selipsky has taken the top job at AWS, companies looking to boost cloud security need to align to industry standards, leverage automation to limit cloud misconfigurations and don't rely solely on cloud service providers for security.

The Mercedes-Benz leak highlights an issue that security teams keep seeing time and again: Private data that’s accidentally left publicly accessible on a cloud storage platform by a vendor.

Security starts before detection and response, but many organizations focus there first. Mature security teams understand the importance of identification and protection.  Establishing good cyber hygiene and taking proactive measures to secure themselves against the ever-increasing threat landscape is a critical first step in a holistic security program.  How should organizations build a holistic security […]

Aqua Security reported that data it collected from honeypots protecting containers over a six-month period revealed that 50% of misconfigured Docker APIs are attacked by botnets within 56 minutes of being set up.