Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
FortiBleed attacks are continuing, with the FBI and Secret Service warning of compromised Fortinet firewalls, account lockouts and potential ransomware activity.
Read More FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
While AI is reshaping the threat landscape, the people defending against those threats remain vital.
Read More AI May Be the Future, But Talent is What Builds Security
The reality is that a lot of what hackers actually do is just social engineering in one form or another.
Read More Catch Me If You Can is the Social Engineeer’s Playbook
The vendor says this is a configuration-dependent issue rather than a failure of the security patches themselves.
Cisco “strongly recommends” customers apply a patch for a critical API authentication bypass that’s being exploited.
Read More Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
