Network security

I've been so excited to see the external attack surface management (EASM) market take off in the past few years. This market category focuses exclusively on security issues exposed to the public Internet - issues ANYONE can see. All organizations have exposure management problems, but industries that are traditionally underfunded when it comes to ...

AIs in Love, UEFI, Fortinet, Godaddy, Juggalos, Aaran Leyland, and More. In this edition of the Security Weekly News.

Small and midsize companies tend not to check for NAS updates, so customers advised to patch right away.

If you find yourself being the default IT technician for your friends and family, here’s what you can do to keep them safe online.

GoDaddy must adhere to a number of security compliance requirements by the FTC.

Such lagging vulnerability remediation for ProxyLogon significantly contrasts patching activities for a pair of Ivanti flaws also leveraged in Salt Typhoon attacks, tracked as CVE-2023-46805 and CVE-2024-21887, which have been addressed in over 92% of affected Ivanti devices, findings from Tenable revealed.

Attackers gain network access by targeting VPN servers, home, and enterprise routers.

One or more threat actors are currently exploiting CVE-2025-0282 for remote takeover attacks on targeted networks.

Cl0p, Akira, and RansomHub were the next most active ransomware operations, according to a report from NCC Group.

Hackers have set up a botnet based on exploitation of zero day in Four-Faith industrial routers.