Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

7/27/2009
03:39 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Sourcefire, Qualys Partner On Real-Time Risk Analysis

Sourcefire has become a Qualys Solution Partner, and the companies have integrated the Sourcefire 3D System with QualysGuard

Columbia, Md. and Redwood Shores, Ca., July 22, 2009 " Sourcefire, Inc. (Nasdaq:FIRE), a leader in Cybersecurity, and Qualys', Inc., the leading provider of on demand IT security risk and compliance management solutions, today announced that Sourcefire' has become a Qualys Solution Partner and the companies have integrated the Sourcefire 3D' System with QualysGuard'.

The combination of Sourcefire and Qualys enables organizations to further reduce the number of actionable network threats by leveraging Sourcefire Defense Center' to correlate threats detected by Sourcefire's intrusion prevention system (IPS) against host vulnerabilities identified by QualysGuard. With Sourcefire and Qualys working in tandem, the number of actionable network threats detected by the Sourcefire IPS can be vastly reduced, leading to increased security and lower total cost of ownership (TCO).

"Through our innovative partnership with Sourcefire, customers are able to gain increased insight into the relevancy of attacks, so that they can focus on those threats that matter most," said Wolfgang Kandek, Chief Technology Officer at Qualys.

This integration provides customers with the ability to import QualysGuard scan data into the Sourcefire RNA' (Real-time Network Awareness) host database, combining real-time network discovery information with active vulnerability scan data. This enables users to quickly determine if a host is actually vulnerable to a given exploit, saving valuable analysis time.

"Organizations waste a lot of time addressing threats that actually have no impact to their networks," said Martin Roesch, Founder and CTO at Sourcefire. "By combining RNA's real-time network intelligence with Qualys' active scan data, the Sourcefire 3D System can now reduce the number of actionable alerts and allows the customer to focus on the ones that actually impact their environment."

About Qualys Qualys, Inc. is the leading provider of on demand IT security risk and compliance management solutions " delivered as a service. Qualys' Software-as-a-Service solutions are deployed in a matter of hours anywhere in the world, providing customers an immediate and continuous view of their security and compliance postures.

The QualysGuard' service is used today by more than 3,500 organizations in 85 countries, including 40 of the Fortune Global 100 and performs more than 200 million IP audits per year. Qualys has the largest vulnerability management deployment in the world at a Fortune Global 50 company.

Qualys has established strategic agreements with leading managed service providers and consulting organizations including BT, Etisalat, Fujitsu, IBM, I(TS)2, LAC, NTT, SecureWorks, Symantec, Tata Communications, TELUS and VeriSign. For more information, please visit http://www.qualys.com.

About Sourcefire Sourcefire, Inc. (Nasdaq:FIRE), is a world leader in Cybersecurity solutions. Sourcefire is transforming the way Global 2000 organizations and government agencies manage and minimize network security risks. Sourcefire's IPS and Real-time Adaptive Security solution equips customers with an efficient and effective layered security defense " protecting network assets before, during and after an attack. Through the years, Sourcefire has been consistently recognized for its innovation and industry leadership by customers, media and industry analysts alike " with more than 40 awards and accolades. Today, the names Sourcefire and founder Martin Roesch have grown synonymous with innovation and network security intelligence. For more information about Sourcefire, please visit http://www.sourcefire.com.

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/14/2020
Omdia Research Launches Page on Dark Reading
Tim Wilson, Editor in Chief, Dark Reading 7/9/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-4462
PUBLISHED: 2020-07-16
IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive i...
CVE-2019-4747
PUBLISHED: 2020-07-16
IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172887.
CVE-2019-4748
PUBLISHED: 2020-07-16
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.
CVE-2020-14000
PUBLISHED: 2020-07-16
MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in remote code execution because the URL's content is treated as a script and is executed as a worker. The responsible code ...
CVE-2020-15027
PUBLISHED: 2020-07-16
ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This was patched in 2020.7 and in a hotfix for 2019.12.