Connect with us

Tech News

Positive Technologies: companies only have six days to install updates before cybercriminals strike

Published

on

For five years running, vulnerability exploitation has ranked among the top three most popular attack methods on organizations, according to the study done by Positive Technologies. In 2022–2023, attackers stole confidential data from over 2,700 companies worldwide, exploiting just one vulnerability. This study presents the results of analyzing dark web discussions and statistics on vulnerabilities, along with issues and solutions in organizational vulnerability management.

“Over the past three years, vulnerability exploitation has increasingly attracted cybercriminals, accounting for about one-third of all successful cyberattacks: it accounted for 18% in 2019, and 32% in 2023. On average, an experimental PoC exploit appears within six days of a critical vulnerability disclosure. This PoC, often a code fragment, command list, or program, can be used to attack a vulnerable system. In as few as five days, discussions surrounding this PoC begin on dark web forums, and with them the likelihood of ready-to-use exploits being developed to be used in mass attacks increases,” notes Fedor Chunizhekov, Head of Security Analytics at Positive Technologies.

Positive Technologies has analyzed over 51 million messages across 217 dark web platforms.The most commonly mentioned vulnerabilities are those in WinRAR (CVE-2023-38831), Fortinet products (CVE-2022-40684), and the Java-based Spring Framework (CVE-2022-22965). The vulnerabilities in Linux (CVE-2022-0847) and the Microsoft Support Diagnostic Tool (CVE-2022-30190) have also been objects of hackers’ attention. Messages about remotely exploited vulnerabilities constitute 70% of discussions among cybercriminals on the dark web.

Delaying vulnerability fixes can lead to serious issues for organizations. In May 2023, a mass defacement of websites in the .ru and .рф domains occurred due to the exploitation of the CVE-2022-27228 vulnerability in the 1C-Bitrix web development and content management system. By exploiting the CVE-2023-4966 vulnerability, criminals stole data on 36 million customer accounts from the telecommunications company Xfinity, including password hashes, passwords, and answers to security questions. Ransomware groups have used a flaw in the Microsoft Windows Support Diagnostic Tool (CVE-2022-30190, also known as Follina) to conduct mass ransomware attacks. APT groups have also exploited this vulnerability in their cyberespionage campaigns. Due to the exploitation of a critical vulnerability in Progress MOVEit Transfer (CVE-2023-34362), confidential data from over 2,700 organizations worldwide was compromised.

To prevent the exploitation of vulnerabilities and the occurrence of non-tolerable events, proactive measures must be taken to protect individual services and the entire IT infrastructure. Experts recommend that organizations regularly inventory and classify their assets; prioritize assets based on their importance, as well as the severity and frequency of vulnerabilities; conduct regular security analyses of systems and applications; and monitor the dark web to identify the latest threats. Setting realistic timelines for vulnerability remediation and closely monitoring the patching process are also crucial.

For this, we recommend using modern vulnerability management systems, such as MaxPatrol VM. Using specialized tools allows you to promptly detect and eliminate dangerous vulnerabilities both on the network perimeter and within the infrastructure, with information about current vulnerabilities being delivered to MaxPatrol VM within just 12 hours. Monitoring the status of the target systems and intermediary target systems on a regular basis helps to prevent non-tolerable events associated with the exploitation of vulnerabilities in important assets.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech News

BOLT EXPANDS INTO THE UAE CAPITAL

Published

on

Dubai Taxi Company PJSC (“DTC”), the leading provider of mobility services in Dubai, and its strategic partner Bolt today announced the entry of Bolt’s ride-hailing services in Abu Dhabi, marking a significant step in the partnership’s expansion across the UAE.

The expansion builds on strong e-hailing momentum across the DTC–Bolt strategic partnership. In 2025, DTC reported a 24% year-on-year increase in e-hailing activity across its taxi and limousine segments, supported by continued fleet expansion and growing customer adoption of digital booking channels.

Bolt will initially launch limousine services where customers in Abu Dhabi will be able to access ride-hailing services backed by a huge network of fleet owners, drivers, and vehicles. This will be followed by taxi services in weeks to follow.

Vasilis Hadjiaslanis, General Manager of Bolt UAE, said: “Abu Dhabi is a natural next step for Bolt in the UAE. We have seen exceptional demand for reliable, app-based mobility, and this milestone gives residents and visitors in the capital access to a service that is fast, convenient, and built around their needs. We are proud to be on this journey alongside our partners at DTC, and we look forward to continuing to grow our presence across the UAE.”

That momentum carried into Q1 2026, with e-hailing activity rising a further 9% year-on-year, reflecting the continued resilience of app-based mobility and the long-term growth potential of digital transport services in the UAE.

The expansion also relies on the partnership’s growth in Dubai, where Q1 2026 saw the integration of 1,823 National Taxi vehicles into the Bolt platform. Broadening Bolt’s UAE footprint and strengthens its role in supporting the country’s evolving ecosystem, shaping how residents, visitors, and businesses move across cities.

Driven by this high demand, Bolt expansion into Abu Dhabi reinforces DTC’s commitment to delivering more accessible mobility solutions for residents, visitors, and businesses nationwide, and support the UAE’s wider shift toward smart mobility.

Continue Reading

Tech News

London Business School Hosts MENA Leaders to Discuss AI, Investment, and the Digital Economy

Published

on


London Business School (LBS) hosted its 23rd Annual MENA Conference at its London campus, bringing together policymakers, investors, entrepreneurs, academics, and industry leaders to discuss the forces reshaping the Middle East and North Africa’s economic future.

Over the years, the conference has evolved into one of the region’s most recognised platforms for discussions around innovation, entrepreneurship, investment, and economic transformation. This year’s edition focused heavily on the intersection of technology, capital, sustainability, and policy, reflecting the region’s growing role within the global digital economy.

“This year’s MENA Conference highlights how the region is positioning itself at the intersection of capital, innovation, and global economic transformation,” said Florin Vasvari, Executive Dean of Executive Education, Middle East, at London Business School.

The agenda explored themes including global capital flows, fintech, climate resilience, artificial intelligence, and the financing landscape surrounding the region’s technology ecosystem. Discussions also examined how regional markets are evolving to support stronger startup ecosystems, deeper capital markets, and long-term economic competitiveness.

Artificial intelligence emerged as one of the defining themes of the conference, with speakers discussing how regional organisations can build sustainable AI capabilities through investments in infrastructure, talent, data, and capital. Conversations also explored how fintech is reshaping financial infrastructure and improving access to digital financial services across the region.

Throughout the event, senior executives, policymakers, founders, and investors shared perspectives on the MENA region’s evolving role within global markets, as governments and businesses increasingly position technology and innovation at the centre of long-term economic diversification strategies.

The conference also highlighted London Business School’s growing regional engagement, following the opening of its executive office in Riyadh alongside its longstanding Dubai campus, strengthening its support for leadership development and executive education across the GCC.

Continue Reading

Tech News

HOLCIM LAUNCHES UAE’S LOWEST-CARBON CEMENT, CRAFTED FROM LOCALLY SOURCED MATERIALS

Published

on

 

Holcim, the leading partner for sustainable construction, has launched its latest ECOPlanet low-carbon cement in the UAE, produced from locally sourced materials and designed to support the country’s drive toward stronger, more self-reliant industrial growth.

The launch reflects the UAE’s continued focus on building a more resilient manufacturing base and minimizing dependence on imported construction inputs. By using materials sourced within the country and produced locally, ECOPlanet helps strengthen in-country value while supporting the construction sector’s transition to lower-carbon building practices.

Holcim’s new product achieves a 30% reduction in carbon footprint compared to traditional cement and offers developers, contractors, architects and engineers a locally made solution that aligns with both sustainability targets and national industrial priorities. ECOPlanet is engineered to deliver reduced carbon emissions without compromising performance, offering the same strength, durability, and consistency required for large-scale infrastructure and commercial developments. Its formulation enables ready-mix producers and contractors to integrate low-carbon solutions into existing construction workflows with ease.

In the UAE, ready-mix concrete producer Conmix is already using ECOPlanet in an active project, demonstrating the material’s real-world applicability and readiness for immediate deployment at scale. This marks an important step in translating low-carbon construction materials from production into on-ground execution.

As the UAE continues to lead regional growth across the built environment, ECOPlanet establishes the new benchmark for high-performance, low-carbon construction, delivering the scalable foundations required for projects ranging from critical infrastructure and industrial hubs to the icons of the future.

“ECOPlanet reflects our commitment to delivering real, measurable progress in sustainable construction. It is made in the UAE, from UAE materials, and designed to help reduce emissions while strengthening the country’s industrial ecosystem.” said Ali Said, CEO of Holcim UAE and Oman. Holcim is showcasing ECOPlanet at Make it in the Emirates 2026, highlighting how material innovation and local production are helping shape the future of construction in the UAE. The presence reflects the company’s broader role in supporting industrial development, while early adoption by partners such as Conmix demonstrates growing momentum for low-carbon building solutions across active projects in the country.

ECOPlanet is part of Holcim’s global portfolio of low-carbon building materials and solutions designed to deliver high performance while supporting the transition to more sustainable construction practices, building progress for people and the planet.

                                                                    

Continue Reading

Trending

Copyright © 2023 | The Integrator