A security researcher has blamed misconfigured implementations of Microsoft Power Pages for a slew of data breaches from web portals – including the leak of 1.1 million NHS employee records. It’s the latest discovery by Dublin-based security researcher Aaron Costello, who previously discovered the health and personal details of over a million citizens had been … Read more
Everest Re, the reinsurance underwriting arm of global re/insurer Everest, has announced the promotion of Emily Davis, who has been appointed as the Head of Global Specialties, a role that will see her with responsibility for parametric reinsurance solutions.In her new role, Davis will report to Jill Beggs, Reinsurance Executive Vice President and Chief Operating … Read more
For the fourth year in a row, Brown, Goldstein & Levy partner Jessie Weber was recognized in the Lawdragon 500 Leading Civil Rights & Plaintiff Employment Lawyers Guide, named for her practice in Employee & Civil Rights Litigation, including Disability Rights. This recent honor adds to Jessie’s growing list of accolades. Jessie has been recognized … Read more
DrayTek patched 14 vulnerabilities affecting 24 of its router models, including a maximum severity buffer overflow flaw that could lead to remote code execution (RCE) or denial-of-service (DoS). The two critical-, nine high- and three medium-severity DrayTek bugs were discovered by Forescout Research’s Vedere Labs and described in a report titled “DRAY:BREAK” published Thursday. Shodan … Read more
Veeam launched patches for 13 high-severity and 5 vital vulnerabilities, together with one flaw in Veeam Backup & Replication that would result in unauthenticated distant code execution (RCE). The September 2024 Veeam safety bulletin, final up to date Thursday, consists of bugs found in six Veeam merchandise, with CVSS scores starting from 7.3 to 9.9. … Read more