Reports/Dashboards

Brinqa has been chosen by @BuiltIn as a 2023 Best Place to Work in Austin! 🎉 This honor reflects our unwavering company-wide commitment to bringing our customers the most innovative solutions for managing #CyberRisk across their attack surface and security programs.

Team #Brinqa had a big day at the CyberRisk Leadership Exchange in Portland, Ore., today! In his preso, CISO Steve Person told attendees why @Cambia Health Solutions chose Brinqa for #VulnerabilityManagement.

Team #Brinqa is in action at the @CDMmedia #CIO #CISO #Chicago Summit! Tyler and Phil, experts from the leading provider of unified cyber risk management, have a full day of meetings booked with some great companies.

Apple rushed out patches for two zero-days affecting macOS and iOS Thursday, both of which are likely under active exploitation and could allow a threat actor to disrupt or access kernel activity.

https://threatpost.com/apple-rushes-out-patches-0-days-macos-ios/179222/

Analysis of Rockwell Automation's PLC platform has uncovered 2 serious vulnerabilities that give attackers a way to modify automation processes & potentially disrupt industrial operations, cause physical damage to factories, or take malicious actions.

http://shorturl.at/afoyV

The Spring development team today acknowledged the newly reported SpringShell, also called Spring4Shell, vulnerability, releasing new versions of the Spring Framework and Spring Boot to fix the root cause of the issue in the popular Java frameworks.

https://www.darkreading.com/vulnerabilities-threats/spring-fixes-zero-day-vulnerability-in-framework-spring-boot

Google has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that’s being actively exploited in the wild.

https://threatpost.com/google-chrome-bug-actively-exploited-zero-day/179161/

VMware Horizon servers — which many organizations are using to enable secure anywhere, anytime access to enterprise apps for remote workers — continue to be a popular target for attackers looking to exploit the critical Apache Log4j vulnerability.

https://www.darkreading.com/vulnerabilities-threats/log4j-attacks-continue-unabated-against-vmware-horizon-servers

Twice as many zero-day software vulnerabilities were exploited last year before vendors even had the chance to patch them than in 2020, and more than half of the most impactful vulnerabilities started with a zero-day exploit, a new study shows.

https://www.darkreading.com/application-security/zero-day-surge-led-to-more-rapid-exploitation-in-2021

The flaw, tracked as CVE-2022-1040, is specifically an authentication-bypass vulnerability in the User Portal and Webadmin of the Sophos Firewall.

https://threatpost.com/critical-sophos-security-bug-rce-firewalls/179127/