Tag: MITRE

Here you will find all the articles with the tag: MITRE.

MITRE discovered Chinese hack only months after exploitation

MITRE discovered Chinese hack only months after exploitation

In January, hackers infiltrated a MITRE Corporation network. The attackers, believed to be of Chinese origin and identified as UTA0178, exploited two vulnerabilities in VPN solution Ivanti Connect Secure. MITRE argues that the incident shows that even organizations with the very best preparation ca... Read more

date10 hours ago
MITRE: access management vulnerabilities pose increasing threat

MITRE: access management vulnerabilities pose increasing threat

Memory-related bugs are still the most dangerous software vulnerabilities, MITRE concludes. The annual top 25 also shows that in the year 2023, we must increasingly watch out for bugs relating to authentication and authorization steps. The top three remain unchanged in MITRE's CWE Top 25 Most Da... Read more

date10 months ago
MITRE security advisory accidentally exposes vulnerabilities

MITRE security advisory accidentally exposes vulnerabilities

Trusted security alerts have compromised admin consoles on over a dozen IP devices. A security advisory for a vulnerability published by MITRE has accidentally been exposing links to remote admin consoles of over a dozen vulnerable IP devices, according to a report by BleepingComputer. They say... Read more

date2 years ago
GitHub Advisory Database now welcomes user contributions on threats

GitHub Advisory Database now welcomes user contributions on threats

The GitHub Advisory Database, a database of vulnerabilities in open source software, is now open to anyone that wants to share information on a vulnerability. Contributions are curated by an expert panel. The GitHub Advisory Database is the world's largest database of open source software vulner... Read more

date2 years ago
SentinelOne has perfect score in MITRE ATT&CK evaluation

SentinelOne has perfect score in MITRE ATT&CK evaluation

MITRE is probably a familiar name to all security professionals. Part of this organization are the ATT&CK Evaluations, which are performed by MITRE Engenuity. These evaluations are used to determine the quality of parties who apply. The Carbanak-FIN7 Enterprise Evaluation is the most recent and... Read more

date3 years ago
IBM adds the MITRE framework to QRadar Advisor

IBM adds the MITRE framework to QRadar Advisor

IBM Security extends the capabilities of the QRadar Advisor with Watson with the MITRE framework. That machine learning system will help to detect cyber attacks, and learn from the reactions of the security within an organization. The AI platform will work with the open-source MITRE ATT&CK knowl... Read more

date5 years ago