Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

7/27/2009
03:39 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Sourcefire, Qualys Partner On Real-Time Risk Analysis

Sourcefire has become a Qualys Solution Partner, and the companies have integrated the Sourcefire 3D System with QualysGuard

Columbia, Md. and Redwood Shores, Ca., July 22, 2009 " Sourcefire, Inc. (Nasdaq:FIRE), a leader in Cybersecurity, and Qualys', Inc., the leading provider of on demand IT security risk and compliance management solutions, today announced that Sourcefire' has become a Qualys Solution Partner and the companies have integrated the Sourcefire 3D' System with QualysGuard'.

The combination of Sourcefire and Qualys enables organizations to further reduce the number of actionable network threats by leveraging Sourcefire Defense Center' to correlate threats detected by Sourcefire's intrusion prevention system (IPS) against host vulnerabilities identified by QualysGuard. With Sourcefire and Qualys working in tandem, the number of actionable network threats detected by the Sourcefire IPS can be vastly reduced, leading to increased security and lower total cost of ownership (TCO).

"Through our innovative partnership with Sourcefire, customers are able to gain increased insight into the relevancy of attacks, so that they can focus on those threats that matter most," said Wolfgang Kandek, Chief Technology Officer at Qualys.

This integration provides customers with the ability to import QualysGuard scan data into the Sourcefire RNA' (Real-time Network Awareness) host database, combining real-time network discovery information with active vulnerability scan data. This enables users to quickly determine if a host is actually vulnerable to a given exploit, saving valuable analysis time.

"Organizations waste a lot of time addressing threats that actually have no impact to their networks," said Martin Roesch, Founder and CTO at Sourcefire. "By combining RNA's real-time network intelligence with Qualys' active scan data, the Sourcefire 3D System can now reduce the number of actionable alerts and allows the customer to focus on the ones that actually impact their environment."

About Qualys Qualys, Inc. is the leading provider of on demand IT security risk and compliance management solutions " delivered as a service. Qualys' Software-as-a-Service solutions are deployed in a matter of hours anywhere in the world, providing customers an immediate and continuous view of their security and compliance postures.

The QualysGuard' service is used today by more than 3,500 organizations in 85 countries, including 40 of the Fortune Global 100 and performs more than 200 million IP audits per year. Qualys has the largest vulnerability management deployment in the world at a Fortune Global 50 company.

Qualys has established strategic agreements with leading managed service providers and consulting organizations including BT, Etisalat, Fujitsu, IBM, I(TS)2, LAC, NTT, SecureWorks, Symantec, Tata Communications, TELUS and VeriSign. For more information, please visit http://www.qualys.com.

About Sourcefire Sourcefire, Inc. (Nasdaq:FIRE), is a world leader in Cybersecurity solutions. Sourcefire is transforming the way Global 2000 organizations and government agencies manage and minimize network security risks. Sourcefire's IPS and Real-time Adaptive Security solution equips customers with an efficient and effective layered security defense " protecting network assets before, during and after an attack. Through the years, Sourcefire has been consistently recognized for its innovation and industry leadership by customers, media and industry analysts alike " with more than 40 awards and accolades. Today, the names Sourcefire and founder Martin Roesch have grown synonymous with innovation and network security intelligence. For more information about Sourcefire, please visit http://www.sourcefire.com.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
I 'Hacked' My Accounts Using My Mobile Number: Here's What I Learned
Nicole Sette, Director in the Cyber Risk practice of Kroll, a division of Duff & Phelps,  11/19/2019
TPM-Fail: What It Means & What to Do About It
Ari Singer, CTO at TrustPhi,  11/19/2019
Ransomware Surge & Living-Off-the-Land Tactics Remain Big Threats
Jai Vijayan, Contributing Writer,  11/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-19227
PUBLISHED: 2019-11-22
In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
CVE-2019-10203
PUBLISHED: 2019-11-22
PowerDNS Authoritative daemon , all versions pdns 4.1.x before pdns 4.1.10, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.
CVE-2019-10206
PUBLISHED: 2019-11-22
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.
CVE-2018-10854
PUBLISHED: 2019-11-22
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting due to improper sanitization of user input in Name field.
CVE-2019-13157
PUBLISHED: 2019-11-22
nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive.