SecurityLabs

本报告将展示各类机构在物联网（IoT）设备领域面临的广泛威胁，并罗列2022年由思博伦SecurityLabs发现的最严重的威胁。这些漏洞均通过各类最先进的测试计划发现，并且由安全测试领域经业界广泛认可的经验和授权认证对其进行了验证。lg...

The requirements for 5G Security are always evolving, as is the attack surface. A continuous and growing number of vulnerabilities must be accounted for in a comprehensive testing approach, and with the capability of accelerated speed powered by state-of-the-art automation. Network operators are actively engaged in deploying 5G networks around the globe on a widespread scale. This technology trend is defining and transforming the technological landscape for the foreseeable future. Meanwhile, a myriad of new 5G devices is appearing in the market, with many more to come. lg...

该案例研究讨论的是一家北美Tier-1运营商与思博伦开展的合作项目，即委托思博伦SecurityLabs对其会话边界控制器执行贯穿测试和主机安全性审查。 思博伦的贯穿测试符合NIST 800-115 section 5的建议要求。该过程包含多个阶段 － 规划、侦察、扫瞄、攻击、攻击后和报告。 思博伦的专家团队在该会话边界控制器（SBC）的已部署版本中发现了多项关键和严重程度较高的问题，而这些问题都会对该公司的资产、网络，以及与业务单位和部门相关的其它资产，或该公司的客户构成巨大的风险。lg...

在技术行业中，面对网络、设备和应用遭受的各类攻击，相关的预防、探测和修复已经成为各方关切的重点，同时也带来了巨大的挑战。但随着消费电子产品、基于网络和云的服务，以及联网设备的新世界不断汇聚，个人车辆已经成为新的众矢之的。在汽车行业中，整车制造商、软件开发商、芯片制造商，以及汽车供应链中的其它零组件制造商，都愈发深刻地认识到，无论是零组件，还是成品都可能成为恶意攻击的潜在目标。lg...

SecurityLabs experts support in-house testing and offer seasoned expertise for third party security testing, analysis, and compliance. Deliverables include a code review service and source code analysis, as well as a complete range of security services with in-house vulnerability scanning, penetration testing (pentesting) and robust vulnerability research. The customer experience and use cases overview provides high-level insights of SecurityLabs engagements across a wide range of industries, including healthcare, financial services, automotive, hospitality, government, and more. lg...

While SASE offers compelling advantages, it also increases testing complexity and introduces new risks. Get an overview of the challenges, key testing considerations and business advantages of SASE and Zero Trust validation to achieve an optimum balance between performance, security, and QoE.lg...