Companies

Business

Listed Companies Required to Provide Audited Financial Statements within 45 Days of End Date of Relevant Quarter: ADX

September 23, 2024
146
companies

The Abu Dhabi Securities Exchange said the listed companies are required to disclose the agenda and schedule of their Board…

Read More »
Business

Abu Dhabi’s AI Sector Booms with 41.3% Annual Surge in New Companies

September 10, 2024
245
Abu Dhabi's AI Sector Booms with 41.3% Annual Surge in New Companies

The Abu Dhabi Chamber of Commerce and Industry reported that it registered over 400 AI companies in Abu Dhabi by…

Read More »
Business

Ministry of Economy reviews regulatory legislation for telemarketing companies in UAE

August 30, 2024
160
Ministry of Economy reviews regulatory legislation for telemarketing companies in UAE

The Ministry of Economy (MoEc) held a media briefing to explain the UAE’s efforts in regulating the telephone marketing of…

Read More »
Technology

Dubai AI & Web3 Festival Signs Six Partnerships with Leading Global Companies

August 16, 2024
190
Dubai AI & Web3 Festival Signs Six Partnerships with Leading Global Companies

The Dubai AI & Web3 Festival today announced six partnerships with leading global companies. This milestone was unveiled at a…

Read More »
News

ADNOC’s Listed Companies Post Combined AED89 Billion H1 2024 Revenue

August 13, 2024
198
ADNOC’s Listed Companies Post Combined AED89 Billion H1 2024 Revenue

ADNOC Group’s listed portfolio companies have reported strong financial results for the second quarter and first half of 2024. The…

Read More »
Technology

Positive Technologies: Companies only Have Six Days to Install Updates Before Cybercriminals Strike 

July 31, 2024
206
For five years running, vulnerability exploitation has ranked among the top three most popular attack methods on organizations, according to the study done by Positive Technologies1. In 2022–2023, attackers stole confidential data from over 2,700 companies worldwide, exploiting just one vulnerability. This study presents the results of analyzing dark web discussions and statistics on vulnerabilities, along with issues and solutions in organizational vulnerability management. "Over the past three years, vulnerability exploitation has increasingly attracted cybercriminals, accounting for about one-third of all successful cyberattacks: it accounted for 18% in 2019, and 32% in 2023. On average, an experimental PoC exploit appears within six days of a critical vulnerability disclosure. This PoC, often a code fragment, command list, or program, can be used to attack a vulnerable system. In as few as five days, discussions surrounding this PoC begin on dark web forums, and with them the likelihood of ready-to-use exploits being developed to be used in mass attacks increases," notes Fedor Chunizhekov, Head of Security Analytics at Positive Technologies. Positive Technologies has analyzed over 51 million messages across 217 dark web platforms. The most commonly mentioned vulnerabilities are those in WinRAR (CVE-2023-38831), Fortinet products (CVE-2022-40684), and the Java-based Spring Framework (CVE-2022-22965). The vulnerabilities in Linux (CVE-2022-0847) and the Microsoft Support Diagnostic Tool (CVE-2022-30190) have also been objects of hackers' attention. Messages about remotely exploited vulnerabilities2 constitute 70% of discussions among cybercriminals on the dark web. Delaying vulnerability fixes can lead to serious issues for organizations. In May 2023, a mass defacement of websites in the .ru and .рф domains occurred due to the exploitation of the CVE-2022-27228 vulnerability in the 1C-Bitrix web development and content management system. By exploiting the CVE-2023-4966 vulnerability, criminals stole data on 36 million customer accounts from the telecommunications company Xfinity, including password hashes, passwords, and answers to security questions. Ransomware groups have used a flaw in the Microsoft Windows Support Diagnostic Tool (CVE-2022-30190, also known as Follina) to conduct mass ransomware attacks. APT groups have also exploited this vulnerability in their cyberespionage campaigns. Due to the exploitation of a critical vulnerability in Progress MOVEit Transfer (CVE-2023-34362), confidential data from over 2,700 organizations worldwide was compromised. To prevent the exploitation of vulnerabilities and the occurrence of non-tolerable events, proactive measures must be taken to protect individual services and the entire IT infrastructure. Experts recommend that organizations regularly inventory and classify their assets; prioritize assets based on their importance, as well as the severity and frequency of vulnerabilities; conduct regular security analyses of systems and applications; and monitor the dark web to identify the latest threats. Setting realistic timelines for vulnerability remediation and closely monitoring the patching process are also crucial. For this, we recommend using modern vulnerability management systems, such as MaxPatrol VM. Using specialized tools allows you to promptly detect and eliminate dangerous vulnerabilities both on the network perimeter and within the infrastructure, with information about current vulnerabilities being delivered to MaxPatrol VM within just 12 hours. Monitoring the status of the target systems and intermediary target systems on a regular basis helps to prevent non-tolerable events associated with the exploitation of vulnerabilities in important assets

For five years running, vulnerability exploitation has ranked among the top three most popular attack methods on organizations, according to…

Read More »
Business

UAE’s EDGE First in Middle East to be Ranked Among Top 25 Military Companies in the World

December 10, 2020
468
EDGE

Ranking data released by SIPRI, specialist in Arms Industry Database Marking its first year, EDGE, the UAE’s advanced technology group for…

Read More »
Previous page
Back to top button

Adblock Detected

Please Turnoff the adblocker!