Orani Amroussi, Author at Vulcan Cyber

GET A DEMO

The BIGGEST CVEs of Q1 2024: Get the quarterly report

Vulcan Cyber helped an enterprise payment platform reduce critical risk by 50% | Learn how >>

Vulcan Cyber named a RBVM Leader by The OMDIA Universe >>

Must read: The ultimate guide for Cyber Risk Quantification (CRQ) >>

How-to guide: The true impact of exploitable vulnerabilities for 2024 >>

GET A DEMO

SINET16 award, Attack Path Graphs and more: 2023 summer roundup

We’ve been busy. In the fast-paced and ever-evolving world of cyber security, Vulcan Cyber made significant strides in the summer of 2023, recognized formally as we were named a winner of the SINET16 Innovator Award (more on that below). Here’s a roundup of the critical developments that have marked this season as a pivotal period… Continue reading SINET16 award, Attack Path Graphs and more: 2023 summer roundup

API security best practices: a checklist

APIs, or Application Programming Interfaces, are the lifeblood of today’s software ecosystems. As the connectors and communicators between various software components, they enable a rich and integrated digital experience. However, their integrated nature also makes them a lucrative target for cyber attacks. In this blog, we delve deep into API security, dissecting the many aspects… Continue reading API security best practices: a checklist

Fixing CVE-2023-36844, CVE-2023-36846 & CVE-2023-36847 in Juniper Networks

On August 17, 2023, Juniper Networks released an urgent advisory detailing four distinct vulnerabilities (CVEs) impacting Junos OS operating on SRX and EX Series devices. In November, 2023, CISA issued a warning to federal agencies about these same vulnerabilities. Here’s everything you need to know about CVE-2023-36844, CVE-2023-36846, and CVE-2023-36847: What are CVE-2023-36844, CVE-2023-36846, and… Continue reading Fixing CVE-2023-36844, CVE-2023-36846 & CVE-2023-36847 in Juniper Networks

Vulcan Cyber Attack Path Graph targets cloud-scale risk prioritization and mitigation

TEL AVIV, Israel, August 3, 2023 /PRNewswire/ — Vulcan Cyber, developers of the cyber risk management platform for all attack surfaces, today announced the launch of the new Vulcan Cyber Attack Path Graph. Vulcan Cyber Attack Path Graph helps cybersecurity and IT operations teams clearly visualize attack paths and security posture impact based on cascading… Continue reading Vulcan Cyber Attack Path Graph targets cloud-scale risk prioritization and mitigation

IBM’s Cost of a Data Breach report 2023 – what we learned

In 2022, we explored the biggest takeaways from the IBM “Cost of a Data Breach” report for 2022. Among other findings, we noted that the cost of a data breach in 2022 was a record $4.35m per incident, an increase of 2.6% from 2021. This year’s report demonstrates another increase in this cost, and highlights… Continue reading IBM’s Cost of a Data Breach report 2023 – what we learned

How to fix CVE 2023-2640 & CVE-2023-32629 in the Ubuntu kernel

Two high-severity security vulnerabilities have been revealed in the Ubuntu kernel. These flaws, dubbed as GameOver(lay) and traced as CVE-2023-2640 and CVE-2023-32629 with a CVSS score of 7.8, are found in a module known as OverlayFS. The vulnerabilities stem from inadequate permissions checks in certain circumstances that could let a local user gain elevated privileges. … Continue reading How to fix CVE 2023-2640 & CVE-2023-32629 in the Ubuntu kernel

Compliance in the cloud: 5 things you need to know

Cloud transformation offers many benefits to the modern enterprise. But it also presents significant challenges. It takes a lot of research and planning. It calls for expertise in the new cloud-based model of delivering IT. And it can potentially involve a significant amount of application redesign and coding work. But it also requires a fresh… Continue reading Compliance in the cloud: 5 things you need to know

Vulcan Cyber is a launch partner for Wiz Integrations (WIN) platform

TEL AVIV – June 13, 2023 – Vulcan Cyber, developers of the cyber risk management platform for all attack surfaces, today announced the launch of the Vulcan Connector for Wiz and a partnership with leading cloud security provider Wiz as the company unveils Wiz Integrations (WIN). Vulcan Cyber, hand selected as a launch partner, brings… Continue reading Vulcan Cyber is a launch partner for Wiz Integrations (WIN) platform

Vulcan Cyber partners with InfoGuard AG to bring complete cyber risk management to DACH region

Vulcan Cyber risk-based vulnerability management solutions for all attack surfaces now available across Switzerland, Germany & Austria TEL AVIV, Israel, May 29, 2023 – Vulcan Cyber, developers of the cyber risk management platform for infrastructure, application and cloud vulnerabilities, today announced a new partnership with InfoGuard AG, the Swiss expert for cyber security and cyber defence in the… Continue reading Vulcan Cyber partners with InfoGuard AG to bring complete cyber risk management to DACH region

How to fix CVE-2023-32243 in Elementor Essential Addons

A vulnerability has been discovered in Essential Addons for Elementor, a popular WordPress plugin with over one million active installations. The vulnerability, tracked as CVE-2023-32243, allows an unauthenticated attacker to reset the password of any user on the affected site, effectively granting them administrator privileges. Here’s what we know so far: What is CVE-2023-32243? CVE-2023-32243… Continue reading How to fix CVE-2023-32243 in Elementor Essential Addons

The one platform to own your risk

OVERVIEW

CAPABILITIES

USE CASES

SOLUTIONS

LIBRARY

CVE LAB

GET TO KNOW US

GET IN TOUCH

Author: Orani Amroussi