Travis Smith Journalist Profile

Articles

Heartwarming Holiday Books

Nov 28, 2024 | citylifestyle.com | Travis Smith |Ben Clanton |Rose Levy Beranbaum |Debbie Macomber

Featured Article Librarians from Mason Public Library reveal their favorite books for the season. Article by Marie Kriedman Photography by Provided Originally published in Mason & Deerfield LifestyleCurling up with a good book is a favorite pastime for book lovers eager to get lost in a new story, but winter adds an extra special touch of coziness.
Risk Fact #5: Keeping the Pace of Remediation at Cloud Scale Requires Automation

Sep 12, 2023 | blog.qualys.com | Travis Smith

The 2023 TotalCloud Security Insights report from the Qualys Threat Research Unit (TRU) provides research insights, best practices, and detailed recommendations organized by five separate Risk Facts. The insights will enable organizations using cloud technologies to better understand these risks and how they can be better prepared to face those challenges in today’s threat landscape.
Risk Fact #1: Cloud Misconfigurations Enable Exploitation by Attackers

Aug 1, 2023 | blog.qualys.com | Travis Smith

Qualys Blog Series – 2023 TotalCloud Security Insights by the Threat Research UnitThe 2023 TotalCloud Security Insights report from the Qualys Threat Research Unit (TRU) provides research insights, best practices, and detailed recommendations organized by five separate Risk Facts. The insights will enable organizations using cloud technologies to better understand these risks and how they can be prepared to face those challenges in today’s threat landscape.
Progress MOVEit Transfer Vulnerability Being Actively Exploited

Jun 7, 2023 | blog.qualys.com | Travis Smith

On June 2nd, CVE-2023-34362 was published against the Progress MOVEit Transfer product and was quickly added to CISA’s Known Exploited Vulnerabilities Catalog. MOVEit Transfer is a managed file transfer solution available as an on-premise solution that enables file transfer between business partners and customers. The vulnerability effects all versions before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1).
Risk Fact #4: Misconfigurations Still Prevalent in Web Applications

Mar 31, 2023 | blog.qualys.com | Travis Smith

Qualys Blog Series – Threat Research Unit ReportThe Open Web Application Security Project (OWASP) Top 10 is a list of the most common and most critical vulnerabilities that can impact a web application. Security experts rely on the OWASP Top 10 when talking about web app security. The list helps developers prioritize and understand what to fix to make their applications more secure.
Risk Fact #3: Initial Access Brokers Attack What Organizations Ignore

Mar 30, 2023 | blog.qualys.com | Travis Smith

Qualys Blog Series – Threat Research Unit Report“Divide and Conquer” is an emerging and winning strategy for cyber criminals who split responsibilities to improve execution of the attack process. Some threat actors specialize in the back end, which often is ransomware deployed at scale. The front end of attacks – planning and executing penetration of vulnerable IT – is increasingly done by a different threat actor called an Initial Access Broker (IAB).
Risk Fact #2: Automation Is the Difference Between Success and Failure

Mar 29, 2023 | blog.qualys.com | Travis Smith

Qualys Blog Series – Threat Research Unit ReportOrganizational leaders dread the consequences of a successful cyber-attack, which can be devastating due to data loss, reputational damage, and legal repercussions. Under the hood, security professionals are acutely focused on finding technical means to discover and remediate the risks – and keep pace with adversaries.
Risk Fact #1: Speed Is the Key to Out-Maneuvering Adversaries

Mar 28, 2023 | blog.qualys.com | Travis Smith

Qualys Blog Series – Threat Research Unit ReportThe 2023 Qualys TruRisk Research Report from the Qualys Threat Research Unit (TRU) provides detailed research insights that are organized into five separate Risk Facts. In this blog, we look at Risk Fact #1 – Speed is the key to out-maneuvering adversaries. The main lesson from Risk Fact #1 is obvious yet striking. On average, it takes an average of 30.6 days to patch weaponized vulnerabilities.