Tag Archive for: manager

Richard Sands joins Cyble as General Manager for the North America region

/in


Cyble announced that Richard Sands, former IT Security Director of Yum! Brands, will be joining Cyble as the General Manager for the North America region.

Richard’s addition to Cyble’s leadership team is expected to bolster the market reception of its services and add new impetus to the company’s growth. His expertise will also help shape an energetic work environment at Cyble, spearhead innovative strategic thinking, and foster the development of a dynamic organization.

Richard brings 20+ years of rich global experience in managing cybersecurity risks within the industry and as a trusted advisor to leading organizations. Prior to joining Cyble, Richard spent five years at Yum! Brands as its Director Global IT Security, three years at BHP as Global Cyber Security Strategy Lead, and over a decade at PricewaterhouseCoopers as Director, Information Security Services.

Beenu Arora, Founder and CEO at Cyble said, “As we move forward to make Cyble ‘Future Ready’, I am delighted to welcome Richard to the team. His calibre and expertise will ensure that Cyble has a resolute foundation and adopt resilient strategies to guide our sales and marketing efforts. The entire leadership team at Cyble is excited to keep innovating optimal solutions that elevate the experience of our clients.”

“Cyble’s long-term vision, people-first culture, and focus on serving clients means the future for Cyble is bright. I am excited to join this skilled and passionate team to help steer strategies in North America, establish sustainable relationships with our clients as their trusted cyber partner, and drive business results to fuel the Cyble’s next growth phase,” said Richard.

Beenu also added, “I am delighted to see Cyble hit our own scaling moment. We are responding to this growth by adding strategic talent to our leadership team! As Cyble continues to expand globally, we are further leveraging on virtual onboarding to strengthen our organization at multiple levels in tandem with our growth plans.”

Earlier in 2020, Cyble also appointed Arnab Chakraverty as Director, Products and Dhanalakshmi PK as Associate Director, Malware and Intelligence Research.

Source…

Cisco fixes Security Manager vulnerabilities with public exploits

/in


Cisco has released security updates to address multiple pre-authentication vulnerabilities with public exploits affecting Cisco Security Manager that could allow for remote code execution after successful exploitation.

Cisco Security Manager helps manage security policies on a large assortment of Cisco security and network devices, and it also provides summarized reports and security event troubleshooting capabilities.

This product works with a wide array of Cisco security appliances including but not limited to Cisco ASA appliances, Cisco Catalyst 6000 Series Switches, Integrated Services Routers (ISRs), and Firewall Services modules.

Proof-of-concept exploits available since November

“The Cisco Product Security Incident Response Team (PSIRT) is aware of public announcements about these vulnerabilities,” the advisory says.

These vulnerabilities impact Cisco Security Manager releases 4.22 and earlier and they were disclosed by Cisco on November 16, after being reported by Code White security researcher Florian Hauser in August. 

Hauser shared proof-of-concept exploits for all 12 Cisco Security Manager vulnerabilities he reported after Cisco PSIRT stopped responding.

Luckily, at the moment, Cisco says that they are not aware of any ongoing attacks exploiting the vulnerabilities patched today.

“Cisco PSIRT is not aware of malicious use of the vulnerabilities that are described in this advisory,” Cisco adds.

Security updates available

Cisco addressed two of the 12 vulnerabilities (CVE-2020-27125 and CVE-2020-27130) but didn’t provide any security updates to fix multiple security bugs, collectively tracked as CVE-2020-27131.

The vulnerabilities were found by Hauser in the Java deserialization function in Cisco Security Manager and are caused by “insecure deserialization of user-supplied content by the affected software.”

Following successful exploitation, they could allow unauthenticated attackers to execute arbitrary commands remotely on vulnerable devices.

“An attacker could exploit these vulnerabilities by sending a malicious serialized Java object to a specific listener on an affected system,” Cisco explains.

“A successful exploit could allow the attacker…

Source…

Erillisverkot Finland adds Ericsson Security Manager

/in


Instant, reliable, and stable communication is critical to enabling and supporting successful emergency operations. First responders, including firefighters, emergency medical service personnel and police, rely on fast and secure connectivity. Public safety agencies are increasingly turning to mobile 3GPP-based solutions driven by 4G and 5G capabilities such as secure and speedy sharing of data, images, and video.

In April this year, Ericsson announced a partnership with the Erillisverkot Group to build a next-generation Public Protection and Disaster Relief (PPDR) network based on 4G/5G technology. The partnership, which covers network migration to Ericsson’s dual-mode 5G core and solutions for a common cloud-native platform, will now include Ericsson Security Manager. 

Ericsson Security Manager will enhance the control and visibility of network security for Erillisverkot’s 4G and 5G networks. The solution provides security automation, compliance monitoring, and security analytics.

Ericsson Security Manager will also help to automate security controls and maintain them at the desired level. It will also shorten the average reaction time to possible security breaches.

Public safety authorities to benefit from these services include the Finnish Defense Forces, police, fire and rescue services, social services, and health care providers. Other users include Finland’s Emergency Response Centre Administration, government and local authorities, and companies critical to national emergency supplies.

Antti Kauppinen, Head of Department Mobile Technology Development and Strategy, Erillisverkot Group, says: “Providing the best quality, safest and most secure network is exactly why we exist. By adding Ericsson Security Manager to our partnership with Ericsson, we will have the most reliable, secure, and sturdy network for our network users. As a result, Finnish society will benefit the most.”

Keijo Mononen, Head of Security Solutions, Business Area Technologies and New Businesses, Ericsson, says: “Ericsson Security Manager addresses a security threat landscape that is always changing. With Ericsson Security Manager, Erillisverkot gets a solution to safeguard…

Source…

WordPress security: Zero-day flaw in File Manager plugin actively exploited – The Daily Swig

/in

WordPress security: Zero-day flaw in File Manager plugin actively exploited  The Daily Swig
“zero day exploit” – read more