CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

Security vulnerabilities Stories - Page 5

Global Stories

Security vulnerabilities stories

Palo Alto Networks unveils Cortex Cloud ASPM to block app risks
Firewalls

Palo Alto Networks unveils Cortex Cloud ASPM to block app risks

Palo Alto Networks launches Cortex Cloud ASPM, a prevention-first tool to block security risks in cloud and AI apps before deployment, enhancing threat management.

By Catherine Knowles • 3 min read • Fri, 8th Aug 2025
Palo Alto upgrades Cortex Cloud to tackle AI-driven code risks
Firewalls

Palo Alto upgrades Cortex Cloud to tackle AI-driven code risks

Palo Alto Networks has enhanced Cortex Cloud with a new module to prevent AI-generated code risks, boosting security for faster, safer software development.

By Shannon Williams • 3 min read • Thu, 7th Aug 2025
BeyondTrust launches Phantom Labs to boost identity security research
Data Science

BeyondTrust launches Phantom Labs to boost identity security research

BeyondTrust launches Phantom Labs, a specialised team to research identity security threats and enhance protection against identity exploitation in hybrid and cloud environments.

By Melvin Hipolito • 4 min read • Tue, 5th Aug 2025
Dawnguard raises USD $3m to embed security at design stage
DevOps

Dawnguard raises USD $3m to embed security at design stage

Amsterdam-based cybersecurity startup Dawnguard secures USD $3 million to embed security into system design, aiming to prevent risks from the development phase onwards.

By Jed Nykolle Harme • 3 min read • Thu, 31st Jul 2025
Panaseer launches AI tool for real-time analysis of cyber risks
Firewalls

Panaseer launches AI tool for real-time analysis of cyber risks

Panaseer has launched Key Drivers, an AI tool delivering real-time cybersecurity risk analysis to help organisations swiftly spot and address vulnerabilities.

By Catherine Knowles • 4 min read • Wed, 30th Jul 2025
AI deployment creates new cybersecurity risks, warns report
Risk & Compliance

AI deployment creates new cybersecurity risks, warns report

Trend Micro warns that rapid AI deployment is exposing critical cybersecurity risks, with thousands of servers vulnerable to attacks due to unpatched and unsecured components.

By Catherine Knowles • 3 min read • Wed, 30th Jul 2025
Azul launches Managed Services Programme for Java insights
Application Security

Azul launches Managed Services Programme for Java insights

Azul has launched a Managed Services Provider Programme to help partners offer Java asset management, security and code insights via its Intelligence Cloud platform.

By Sean Mitchell • 4 min read • Wed, 30th Jul 2025
Nearly 8% of UK & US staff use Chinese GenAI at work
Software-as-a-Service

Nearly 8% of UK & US staff use Chinese GenAI at work

Nearly 8% of UK and US employees use Chinese generative AI tools at work, raising concerns over frequent exposure of sensitive corporate data, a study finds.

By Shannon Williams • 3 min read • Wed, 23rd Jul 2025
Nearly half of UK firms hit by breaches from unmanaged devices
Advanced Persistent Threat Protection

Nearly half of UK firms hit by breaches from unmanaged devices

Nearly half of UK firms faced data breaches last year due to unmanaged devices, revealing major security gaps amid growing hybrid work and shadow IT use.

By Jed Nykolle Harme • 3 min read • Tue, 22nd Jul 2025
The Identity Epidemic: Why your business's digital front door is under siege
Firewalls

The Identity Epidemic: Why your business's digital front door is under siege

Identities have become the prime target in cybersecurity, with businesses urged to secure digital access through ownership, least privilege, MFA, and secret management.

By Morey Haber • 5 min read • Mon, 21st Jul 2025
Cycode & HackerOne integrate to speed software vulnerability fixes
Application Security

Cycode & HackerOne integrate to speed software vulnerability fixes

Cycode and HackerOne partner to integrate bug bounty findings into Cycode's platform, speeding up vulnerability fixes and improving software security workflows.

By Catherine Knowles • 4 min read • Fri, 18th Jul 2025
Windows Server 2025 flaw lets attackers persist in Active Directory
Advanced Persistent Threat Protection

Windows Server 2025 flaw lets attackers persist in Active Directory

A design flaw in Windows Server 2025 allows attackers to persist undetected in Active Directory by exploiting managed service account vulnerabilities.

By Melania Watson • 3 min read • Thu, 17th Jul 2025
Race condition in nopCommerce gift cards enables repeated use
DevOps

Race condition in nopCommerce gift cards enables repeated use

A race condition vulnerability in nopCommerce gift cards lets attackers redeem the same card repeatedly, exploiting a flaw in the checkout process.

By Jed Nykolle Harme • 4 min read • Fri, 11th Jul 2025
The risky race to AI: How DeepSeek is reshaping the AI landscape
Data Protection

The risky race to AI: How DeepSeek is reshaping the AI landscape

Chinese startup DeepSeek's new AI model cuts costs but sparks global security fears, prompting bans and cyberattacks amid geopolitical tensions.

By Pascal Geenens • 4 min read • Thu, 26th Jun 2025
Growing gap revealed between AI innovation & enterprise security
DevOps

Growing gap revealed between AI innovation & enterprise security

A new report reveals a widening gap between AI innovation and enterprise security, with 36% of firms struggling to keep up with generative AI risks.

By Shannon Williams • 4 min read • Thu, 26th Jun 2025
Outpost24 identifies key OAuth risks & best practice solutions
Application Security

Outpost24 identifies key OAuth risks & best practice solutions

Outpost24 reveals seven common OAuth risks and offers best practices to help organisations prevent unauthorised access and data breaches through better token security.

By Jed Nykolle Harme • 5 min read • Sat, 21st Jun 2025
Poor cloud security leaves secrets & data at risk, report finds
Hyperscale

Poor cloud security leaves secrets & data at risk, report finds

A report finds poor cloud security and misconfigurations put sensitive data and secrets at risk across major public cloud providers worldwide.

By Shannon Williams • 3 min read • Thu, 19th Jun 2025

Stories from Other Regions

Security vulnerabilities stories

Multiple brother devices: Multiple vulnerabilities (FIXED)
Firewalls

Multiple brother devices: Multiple vulnerabilities (FIXED)

Security researcher Rapid7 has uncovered 8 vulnerabilities in 742 printer models from Brother, FUJIFILM, Ricoh, and Toshiba, with fixes now available.

By Stephen Fewer • 8 min read • Thu, 26th Jun 2025