Information Security

Wipro Hack Snags At Least 23 Workers, Breached Systems Still Being Found: Report

by Michael Novinson
The adversaries were believed to be using ConnectWise Control on the hacked systems to connect remotely to Wipro client systems, which were then used to obtain further access into Wipro customer networks, KrebsOnSecurity reported.
Cisco: Our VPN Storage Method Doesn't Cause 'Unwarranted Exposure'

by Michael Novinson
Cisco this week acknowledged that its VPN application stores session cookies within system memory, but said the exposure associated with this activity isn't 'unwarranted.'
Fighting Back: MSP Customers Get More Security-Savvy

by Michael Novinson
“Third-party risk management is going to become one of the basics businesses have to succeed at,” said Mathew Newfield, chief information security officer at Unisys.
Wipro Breached, Used As Launching Point For Customer Attacks: Report

by Michael Novinson
Wipro has been dealing with a multi-month intrusion from a state-sponsored hacker, and had its systems used as a jumping off point for attacks targeting at least a dozen client systems, according to a KrebsOnSecurity report.
Fortinet To Pay $545K To Settle Claim That Ex-Employee Defrauded Feds

by Michael Novinson
For more than seven years, a now-terminated Fortinet employee directed employees and contractors to alter certain product labels to obscure the country of origin, according to a settlement agreement.
Cisco, Palo Alto Networks Among Those Impacted By VPN App Flaw: Researchers

by Michael Novinson
Carnegie Mellon’s vulnerability disclosure center found that VPN apps built by Cisco, Palo Alto Networks, F5 Networks and Pulse Secure insecurely store authentication tokens and session cookies in memory or log files. Cisco disputes the finding.
Bitdefender Rolls Out Network Monitoring Tool To Find Attacker Activity

by Michael Novinson
NTSA IntelliTriage integrates Bitdefender's IP and threat intelligence from more than 500 million active threat points with the ability of RedSocks to see and analyze network traffic.
New Fortinet Channel Program Promises More Flexibility For Partners

by Michael Novinson
‘The existing Fortinet partner program is probably about a decade old, and it was really well structured for a resale channel,’ says North American channel chief Jon Bove. ‘We have evolved beyond that, and so it was time to evolve the program.’
Sophos Debuts Cloud Optix To Aid Public Cloud Visibility, Compliance

by Michael Novinson
Sophos Cloud Optix provides visibility, automatic compliance regulation and threat response across Amazon Web Services, Microsoft Azure and Google Cloud.
Fortinet Firewall Performance Boosted By World's First SD-WAN ASIC

by Michael Novinson
Fortinet plans to leverage its ASIC chip to combine SD-WAN functionality and advanced security into a single offering, starting with the FortiGate 100F Next-Generation Firewall.
Cloud Security Firm Bitglass Raises $70M, Plans To Double Headcount

by Michael Novinson
Bitglass CEO Nat Kausik anticipates the money will help the company shift from doing just under half of its business through the channel today to 60 percent a year from now.
Rapid7 Buys Network Traffic And Security Monitoring Vendor NetFort

by Michael Novinson
Purchasing NetFort will improve Rapid7’s ability to detect attacks, investigate incidents and gain more visibility into devices that pose a risk to organizations, the company says.
Okta Debuts Access Management For Servers, More Platform Flexibility

by Michael Novinson
Okta Advanced Server Access is the company's first attempt to extend its identity capabilities from SaaS and custom applications down the stack to infrastructure.
Asus Response To 'ShadowHammer' Hack: No Apology, No Details

by Kyle Alspach
‘There's really nothing explaining how somebody got in and used their legitimate certificate,’ one solution provider tells CRN.
British Watchdog Finds ‘Serious’ Huawei Security Vulnerabilities

by Michael Novinson
Vulnerabilities related to Huawei's ‘basic engineering competence and cybersecurity hygiene’ could be exploited by governments or independent hackers, a British review found.