Vulnerability
Discover expert analysis on vulnerability with news, features and insights from the team at IT Pro.
-

Should your business start a bug bounty program?
In-depth Big tech firms including Google, Apple and Microsoft offer bug bounty programs, but can they benefit smaller businesses too?
By Kate O'Flaherty Published
In-depth -

MITRE publishes the top 25 most dangerous software weaknesses
News The annual list features the usual suspects and some new entries too
By Richard Speed Published
News -

ASUS routers receive patches for critical vulnerabilities
News Nearly 20 models have been affected by a spate of vulnerabilities, including two rated ‘critical’
By Ross Kelly Published
News -

Accessing the XDR realm
Whitepaper A guide for MSPs to unleash modern security
By ITPro Published
Whitepaper -

Log4J exploits may rise further as Microsoft continues war on phishing
News Despite Log4J patches being made almost immediately in 2021, exploit attempts are still in the tens of millions
By Connor Jones Published
News -

The top malware and ransomware threats for June 2023
News Organizations face a fresh round of cyber threats as criminals continue to evolve their tactics
By Connor Jones Published
News -

Barracuda Networks says hacked devices “must be immediately replaced” despite patches
News Seven-month exploitation of a critical vulnerability enabled persistent backdoor access in its email security gateway devices
By Ross Kelly Published
News -

Azure AD vulnerability gave attackers backdoor authentication control
News Secureworks shared its findings with Microsoft in 2022, and the company has since issued changes to improve audit logs
By Ross Kelly Published
News -

Cisco reveals exploit code is publicly available for critical switch vulnerabilities
News Attackers could target UI vulnerabilities in Cisco switches to execute malicious code
By Rory Bathgate Published
News -

Microsoft links PaperCut server attacks to Cl0p, LockBit ransomware
News Microsoft Threat Intelligence noted attacks were facilitated by GoAnywhere vulnerabilities and the Raspberry Robin worm
By Rory Bathgate Published
News -

LockBit macOS ransomware strain discovered, sparks concerns over shifting tactics
News Researchers noted that while this disclosure should be a cause for concern, the program is currently very buggy
By Ross Kelly Published
News -

OpenAI to pay up to $20k in rewards through new bug bounty program
News The move follows a period of unrest over data security concerns
By Ross Kelly Published
News