VMware Confirms Exploit Code Released for Critical vRealize Logging Vulnerabilities

VMware confirms the publication of exploit code and urged VMware vRealize Log Insight users to implement mitigations immediately.

The post VMware Confirms Exploit Code Released for Critical vRealize Logging Vulnerabilities appeared first on SecurityWeek.

Continue reading VMware Confirms Exploit Code Released for Critical vRealize Logging Vulnerabilities

Gem Security Gets $11 Million Seed Investment for Cloud Incident Response Platform 

Israeli venture group Team8 has bankrolled an $11 million seed-stage investment in Gem Security.

The post Gem Security Gets $11 Million Seed Investment for Cloud Incident Response Platform  appeared first on SecurityWeek.

Continue reading Gem Security Gets $11 Million Seed Investment for Cloud Incident Response Platform 

OpenVEX Spec Adds Clarity to Supply Chain Vulnerability Warnings

Chainguard OpenVEX Spec adds clarity to Supply Chain Vulnerability warnings specifications to help software vendors and maintainers communicate precise metadata about the vulnerability status of products.

The post OpenVEX Spec Adds Clarity to Supply Chain Vulnerability Warnings appeared first on SecurityWeek.

Continue reading OpenVEX Spec Adds Clarity to Supply Chain Vulnerability Warnings