article thumbnail

Cybersecurity Snapshot: Log4j Anniversary, CI/CD Risks, Infostealers, Email Attacks, OT Security

Tenable

Cyber Safety Review Board published a 50-plus page report on the Log4j event, and a key takeaway was that Log4Shell is an “endemic vulnerability” that’ll be around for a decade — or perhaps longer. . Source: Accenture Cyber Threat Intelligence team, December 2022). 4 - Cybersecurity looms large in SMB software purchases.

article thumbnail

How Do You Prove Product-Market Fit? A Pop Quiz

Battery Ventures

As head of business development for Battery, I help our earlier-stage portfolio companies find, and then refine, their product-market fit. This is a common problem our team finds during diligence of early-stage companies. Heeding that feedback enabled QuickBooks to serve the many SMB customers they have today.

article thumbnail

SMBleed (CVE-2020-1206) and SMBLost (CVE-2020-1301) Vulnerabilities Affect Microsoft SMBv3 and SMBv1

Tenable

Three months after an out-of-band patch was released for SMBGhost, aka EternalDarkness (CVE-2020-0796), researchers disclosed two new flaws affecting Microsoft’s Server Message Block (SMB) protocol, including working proof-of-concepts. As a result, Microsoft announced in April 2012 that SMB version 2.2 SMB version 3.1.1