CVE-2021-43178

Read Time:9 Second

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none.

Read More

Thoma Bravo snares Ping Identity in $2.8 billion go-private deal

Read Time:37 Second

In the latest move in a series of security-company acquisitions, private equity firm Thoma Bravo announced Wednesday that it has reached an arrangement to acquire IAM (identity and access management) firm Ping for a total sale price of $2.8 billion.

Ping Identity’s flagship product is its PingOne Cloud Platform, which acts as an underlying framework to orchestrate the company’s own security products for each step of the identity management process, as well as a way to centrally manage third-party identity solutions.

Thoma Bravo partner Seth Boro said in the announcement that Ping’s products make it well-suited to address the fast-changing needs of companies using identity management technology.

To read this article in full, please click here

Read More

Qualys adds external attack management capability to cloud security platform

Read Time:34 Second

Cloud security and compliance software company Qualys on Wednesday announced it is adding external attack surface management (EASM) capabilities to the Qualys Cloud Platform.

The new capability will be integrated into Qualys CSAM (cybersecurity asset management) 2.0, an inventory monitoring and resolution tool to help security teams gain visibility into previously unknown internet-facing assets.

“Achieving full asset visibility remains one of cybersecurity’s most elusive goals,” said Sumedh Thakar, Qualys CEO, in a press release. ”CyberSecurity Asset Management 2.0 solves this by providing both the holistic, external attacker-level and internal view of the attack surface to address the increased threat landscape comprehensively.”

To read this article in full, please click here

Read More

Tips to prevent RDP and other remote attacks on Microsoft networks

Read Time:37 Second

One long-favored way that ransomware enters your system is through Microsoft’s Remote Desktop Protocol (RDP) attacks. Years ago when we used Microsoft’s Terminal Services (from which RDP evolved) for shared remote access inside or outside of an office, attackers would use a tool called TSGrinder. It would first review a network for Terminal Services traffic on port 3389. Then attackers would use tools to guess the password to gain network access. They would go after administrator accounts first. Even if we changed the administrator account name or moved the Terminal Services protocol to another port, attackers would often sniff the TCP/IP traffic and identify where it was moved to.

To read this article in full, please click here

Read More