January 2022 Patch Tuesday: Microsoft Fixes 126 Flaws, Nine Critical, and Adobe 41
Qualys's Bharat Jogi reviews January 2022 Patch Tuesday: 126 Microsoft flaws with nine critical, including wormable CVE-2022-21907, and 41 Adobe CVEs.
Archive
Latest news, page 4
Zero Trust, AI and the Hyperscale Cloud: Microsoft Malaysia's Dzaharudin Mansor on Modern Cybersecurity
Dr Dzaharudin Mansor of Microsoft Malaysia names zero trust, AI and the hyperscale cloud as the three elements that most improve an organisation's defences.
Kaspersky's APT Predictions for 2022: Spyware Vendors, Supply Chains and Bootkits
Kaspersky's GReAT team expects commercial spyware to fuel new APT groups in 2022, alongside more supply chain, mobile, cloud and bootkit attacks.
Bank Rakyat Indonesia Picks ExtraHop Reveal(x) to Protect Banking Operations
PT Bank Rakyat Indonesia, the country's largest bank, has chosen ExtraHop Reveal(x) network detection and response to secure its critical operations and data.
SE Labs Names CrowdStrike Falcon Best EDR Product for a Second Year
SE Labs' annual report names CrowdStrike Falcon the best endpoint detection and response product for a second year, after a 12th AAA rating since 2018.
Avast Adds Privacy Tools to Its Free Browser Extension, Now Called Avast Online Security & Privacy
Avast has renamed and redesigned its free browser extension, adding a Privacy Advisor, Global Privacy Control, ad opt-out and anti-tracking to phishing defence.
Deepfakes in Cybercrime: Phishing, Biometric Fraud and Dark Web Services
VMware's Rick McElroy on how criminals use deepfakes: voice-cloned phishing, fooling biometric checks, and dark web tutorials for evading security controls.
Why Hardware, Firmware and Software Supply Chains Put Critical Infrastructure at Risk
Keysight's Gail Ow traces supply chain threats from hacked firmware to NOBELIUM and Colonial Pipeline, and argues bills of materials are the near-term fix.
CrowdStrike to Buy SecureCircle, Taking Zero Trust Protection Down to the Data
CrowdStrike has agreed an all-cash deal for SecureCircle, a SaaS service that encrypts endpoint data in transit, at rest and in use under Zero Trust rules.
Google Study Finds Most Malaysian Internet Users Have Poor Password Habits
A Google and YouGov study finds over 90% of Malaysian respondents reuse, share or use guessable passwords, though many say they are open to 2FA.
The Five Most Common Software Security Activities in BSIMM12
Synopsys' Taylor Armerding walks through the five activities most widely adopted by the 128 organisations in BSIMM12, from governance to penetration testing.
Why Data Management Decides How Organisations Survive Ransomware
Veritas's Gary Sievers on rising ransomware in Asia Pacific, the security gap left by COVID-era transformation, and a protect, detect and recover framework.
