100 Million IoT Devices Possibly Exposed to Z-Wave Attack

Researchers have demonstrated that the Z-Wave wireless communications protocol, which is used by more than 100 million Internet-of-Things (IoT) devices, is vulnerable to security downgrade attacks.

http://feedproxy.google.com/~r/Securityweek/~3/ajr3HlW31g8/100-million-iot-devices-possibly-exposed-z-wave-attack

Massive Russia-Linked Botnet Raises Concerns of New Attack on Ukraine

Russia-made VPNFilter malware infects 500,000 devices in preparation of new Ukraine attack

http://feedproxy.google.com/~r/Securityweek/~3/nAJMigkMICM/massive-russia-linked-botnet-raises-concerns-new-attack-ukraine

Vulnerabilities Found in RTUs Used by European Energy Firms

Several critical and high severity vulnerabilities have been found in remote terminal unit (RTU) modules designed for the energy sector and used in various European countries.

http://feedproxy.google.com/~r/Securityweek/~3/HPnx97GBkYM/vulnerabilities-found-rtus-used-european-energy-firms

Best Practices in Securing DevOps

The growing demand for faster software delivery, using public cloud environments, microservices, and containers, has triggered a discussion on the role of security in the world of DevOps.

http://feedproxy.google.com/~r/Securityweek/~3/I8BcHhoEzBM/best-practices-securing-devops

Critical Flaw Impacts Dell EMC RecoverPoint

Several security flaws were recently found in <span style="font-size: 11pt; color: #0563c1; background-color: transparent; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-east-asian: norm

http://feedproxy.google.com/~r/Securityweek/~3/a6rAiU92F-c/critical-flaw-impacts-dell-emc-recoverpoint

Botnets Target Zero-Days in GPON Routers

Two unpatched vulnerabilities in Dasan’s Gigabit-capable Passive Optical Network (GPON) routers are being exploited by Internet of Things (IoT) botnets, security researchers warn.

http://feedproxy.google.com/~r/Securityweek/~3/CTt0zEhxWs0/botnets-target-zero-days-gpon-routers

VMware Patches Fusion, Workstation Vulnerabilities

VMware informed customers on Monday that updates for its Fusion and Workstation products patch important denial-of-service (DoS) and privilege escalation vulnerabilities.

http://feedproxy.google.com/~r/Securityweek/~3/R6kE4pIgEDk/vmware-patches-fusion-workstation-vulnerabilities

Tech Firms Coordinate Disclosure of New Meltdown, Spectre Flaws

Intel, AMD, ARM, IBM, Microsoft and other major tech companies on Monday released updates, mitigations and advisories for two new variants of the speculative execution attack methods known as Meltdown and Spectre.

http://feedproxy.google.com/~r/Securityweek/~3/aiVTpa_-DEo/tech-firms-coordinate-disclosure-new-meltdown-spectre-flaws

Dell Patches Vulnerability in Pre-installed SupportAssist Utility

Dell Patches Local Privilege Escalation in SupportAssist

Dell recently addressed a local privilege escalation (LPE) vulnerability in SupportAssist, a tool pre-installed on most of all new Dell devices running Windows.

http://feedproxy.google.com/~r/Securityweek/~3/EA0Dw2UNf3Y/dell-patches-vulnerability-pre-installed-supportassist-utility

Critical Flaws Patched in Phoenix Contact Industrial Switches

Several vulnerabilities, including ones rated critical and high severity, have been patched in industrial ethernet switches made by Phoenix Contact, a Germany-based company that specializes in industrial automation, connectivity and interface solutions.

http://feedproxy.google.com/~r/Securityweek/~3/fjwXA29cNiM/critical-flaws-patched-phoenix-contact-industrial-switches