Sevco Security

Apple has updated macOS Sequoia to 15.1, which fixes the iPhone Mirroring privacy vulnerability we publicly disclosed on October 8. Sevco recommends that companies apply the patch and update all enterprise Mac devices to macOS 15.1, and should purge any mistakenly collected employee data to eliminate liability risk. Read more about the fix in the update to our blog post here:

Are vulnerability scanners dead? Does it matter how many CVEs you detect if impacted devices are missing patch management agents? A modern approach to vulnerability management should move beyond relying solely on software vulnerabilities (CVEs) and encompass exposures related to security gaps – including missing endpoint controls, outdated controls, and misconfigurations. Watch Brian Contos, our Chief Security Officer, present at InfoSec World 2024 on how companies should transcend CVEs for vulnerability management. Watch the presentation here: https://lnkd.in/gGwqRE7x

Exposure of PII, even if inadvertent, can have major consequences for businesses: financial penalties, legal liabilities, lawsuits, brand reputation damage, and more. The recent discovery of the iOS Broken Mirror privacy vulnerability raises significant compliance concerns. Learn about the regulatory implications and the steps businesses can take to protect themselves from liability in our latest blog post.

Sevco is excited to announce the appointments of Kenneth Shelton as CTO and Aaron Griffin as Chief Architect! Ken, former VP of Engineering at Qualys and then Randori, and Aaron, a seasoned cloud-native SIEM architect, help Sevco continue to build capabilities that address the needs of customers for a comprehensive exposure management platform, aggregating data from across their entire security stack, enriching it with the industry's best exploit intelligence, and prioritizing which vulnerabilities to address to drive better security outcomes.

💡 Are you overwhelmed with siloed sources of data in your vulnerability management program? You're not alone. In our latest AMA with cybersecurity experts Ulf Lindqvist (SRI International) and Bill Crowell (former NSA Deputy Director), we discuss how many organizations struggle with too much data and CVE severity grading that lacks sophistication, making it tough to prioritize vulnerabilities effectively. We dive into best practices for managing this data overload with strategies to streamline your remediation efforts. 🎧 Don't miss out on the insights—and see how Sevco can help consolidate and prioritize your security efforts. #cybersecurity #vulnerabilitymanagement #exposuremanagement

The volume of SOC alerts is increasing, leading to greater likelihood of undetected security gaps and vulnerabilities compromising the security of organizations. What's a security team to do? Join our webinar on Thursday, October 17 where Michael Sampson, Principal Analyst at Osterman Research and Brian Contos, Sevco's Chief Strategy Officer, will discuss Osterman's latest survey results and discuss steps SOCs can take to improve efficiency at assessing and addressing the greatest risks in IT environments today. Register today: https://lnkd.in/gkQAydEZ

Attending MSSP Alert Live in Austin next week? Visit the Sevco team to learn how you can maximize your value and minimize risk for yourself and your customers with full-cycle vulnerability prioritization, remediation validation, and analytics.

🚨 Privacy Alert: Major Bug Found in Apple’s iPhone Mirroring Feature 🚨 Sevco has discovered a critical privacy flaw in macOS 15.0 Sequoia and iOS 18 that may expose personal iPhone apps to corporate IT systems via Apple’s new “iPhone Mirroring” feature. For employees, this is a significant privacy risk—your personal apps (like VPNs, dating apps, health-related apps) could unintentionally become part of the company’s software inventory. For businesses, this could create new data liabilities and the potential for violating privacy laws like CCPA. What to do now: - Employees: Avoid using iPhone Mirroring on work computers. - Companies: Identify any enterprise IT systems collecting software inventory from macOS and work with those vendors to mitigate the risk until a patch is available. We’ve alerted Apple, and they are working on a fix. We've also put in place measures to mitigate this issue for affected Sevco customers. For more details and updates, read our latest blog below. #Cybersecurity #Privacy #macOS #iPhone #DataProtection

Sevco's Brian Contos recently spoke with Jason Norred, CISO at Solutions-II, Inc (Hybrid Data Center, Cyber Security, Managed Services) about the approach Solutions II takes with exposure management: they used a variety of traditional vulnerability management tools alongside EDR and couple that with open source intelligence data. But with so many sources, it was challenging to consolidate and validate the data. Learn what Solutions II does to address this in our latest video.

Sevco's Brian Contos recently sat down with Ryan Plume of World Wide Technology (WWT) for an inside look into how he and his team leverage Sevco for #vulnerability prioritization. Plume shares how Sevco compiles vulnerability data from multiple tools and sources into a single pane of glass, making it easier for the WWT team to identify the root cause as well as prioritize and remediate vulnerabilities at scale. 🛡️ 📺 Watch the full video below!