Third-Party Patch Update: August 2018

Chrome Vulnerability Endangers Your Private Data A vulnerability has been found within Chrome that would allow actors to access information stored by other web platforms, such as major data hoarders Facebook and Google. CVE-2018-6177 was uncovered by Ron Masas, a security researcher from Imperva, and reported to Google. “With several scripts running at once —…

Third-Party Patch Update: June 2018

Third Party Software Updates: June 2018 Roku TV & Sonos IoT devices, which are widely used in businesses that handle sensitive consumer data, such as credit card number and health records, are vulnerable to DNS hacking. These two IoT devices are frequently installed within fast casual dining, medical and dentist businesses. These devices can be…

Third-Party Patch Update: April 2018

Cisco Patches Vulnerability in WebEx Cisco has just released a CVSS 9 rated update for its WebEx software. In their own words, the unpatched vulnerability “could allow an authenticated, remote attacker to execute arbitrary code on a targeted system.” The malicious party would share a Flash file via WebEx’s sharing capabilities to gain control of…

Third-Party Patch Update: March 2018

Will the IoT bankrupt your business? Research on the Internet of Things is not painting a pretty picture. According to research firm Gartner, approximately 20% of organizations have experienced at least one IoT attack in the past three years. There’s also a report from BullGuard showing that 37% of those surveyed had no idea how…

Internet of Threats: Third-Party Patch Update

Managing the Risks of IoT Our definition of a necessary third-party patch is about to get much broader. With more IoT devices connecting to your network, it becomes mandatory to know what’s out there. Back in May 2017, an 11-year old boy took the stage and showed that cybersecurity is about to get much more difficult.…