Новости за 13.07.2021

German software maker SAP has released 12 new security notes as part of its July 2021 security patch day, as well as updates for three previously released security notes.

Microsoft’s Patch Tuesday bundle for July 2021 landed with a loud thud as the world’s largest software maker warns of a new wave of zero-day attacks hitting its flagship Windows operating system.

Mozilla this week pushed Firefox 90 to the stable channel with several security improvements, including better protections against cross-origin threats and an advanced tracker blocking mechanism.

Adobe has issued multiple security advisories with patches for critical vulnerabilities in a wide range of software products, including the ever-present Adobe Acrobat and Reader application.

Breach and attack simulation (BAS) solutions provider AttackIQ today announced that it has raised $44 million in a Series C funding round that brings the total raised by the company to approximately $79 million.

SOC-as-a-service solutions provider Arctic Wolf on Tuesday announced raising $150 million in a Series F funding round, at a valuation of $4.3 billion.

In a recent attack campaign, the Iran-linked threat actor tracked as TA453 has been posing as UK scholars with the University of London’s School of Oriental and African Studies (SOAS) to engage targets of interest and steal their credentials, security researchers with Proofpoint reveal.

The recent attack against users of the Kaseya VSA platform is yet another example of the increasingly organized dynamic of cybercrime. The days of the lone attacker are long gone; these attacks are now big business with significant reconnaissance. Unofficial reports have identified the REvil ransomware threat actors as being behind this supply chain attack.

Google Cloud on Monday announced that its Certificate Authority Service is now generally available.

As our world becomes increasingly virtual, fast, and reliable network connections have never been more critical. Businesses and consumers alike expect a fully connected experience in all aspects of their lives and eagerly await 5G’s faster data speeds, lower latency, and increased connectivity.

A vulnerability affecting some of Schneider Electric’s Modicon programmable logic controllers (PLCs) can be exploited to bypass authentication mechanisms, allowing attackers to take complete control of the targeted device.