Unauthenticated remote code execution vulnerability identified

The Trellix Threat Labs Vulnerability Research team has published research on an unauthenticated remote code execution vulnerability, CVE-2022-32548, that affects multiple routers manufactured by DrayTek, a Taiwanese company that manufactures Small Office and Home Office (SOHO) routers.

Tenable completes acquisition of Bit Discovery

Tenable Holdings, Inc., the Cyber Exposure company, has announced the completion of its acquisition of Bit Discovery, Inc. (“Bit Discovery”), a provider of external attack surface management solutions (EASM).

Elevation of Privilege was the #1 vulnerability category in 2021: Report

The Common Vulnerability Scoring System (CVSS) captures the main characteristics of a vulnerability and generates a numerical score indicating the severity level of the vulnerability, ranging from 0 to 10.

Qualys offers free WAS to help organizations protect against Log4Shell

“Log4Shell is the most alarming vulnerability we’ve seen in the last decade and helping the community battle this unprecedented threat is at the forefront of our focus,” said Sumedh Thakar president and CEO of Qualys.

Digital exposure – Vulnerability – Cybersecurity

It’s imperative that companies make cybersecurity awareness, prevention and security practices a part of their culture. As per the studies conducted in the year 2016, 95% of breached records came from only three industries; government, retail, and technology.