Application Security

6/8/2018
11:20 AM
50%
50%

Enterprise IT Juggling 20-Plus SecOps Tools

Lack of integration also a big issue among decision makers.

Business organizations are not applying the "KISS" principle to the tools they use to manage their security and operations. The majority, according to a new Forrester survey of 200 IT security and operations (SecOps) decision makers, are using more than 20 different tools to manage those functions.

It's more than just a lot of tools in the toolkit, too: Seventy percent of survey respondents said their SecOps tools weren't fully integrated. And that lack of integration makes many aspects of security, from visibility to incident response, more complicated and potentially less effective.

One issue the study seems to resolve is the old dilemma of "full integration" versus "best of breed" in each category: Sixty percent of respondents say their SecOps tools come from five or more vendors, while more than a third (38%) saying 10 or more vendors.

For more, read here and here.

 

 

Top industry experts will offer a range of information and insight on who the bad guys are – and why they might be targeting your enterprise. Click for more information

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Meet 'Bro': The Best-Kept Secret of Network Security
Greg Bell, CEO, Corelight,  6/14/2018
Containerized Apps: An 8-Point Security Checklist
Jai Vijayan, Freelance writer,  6/14/2018
Four Faces of Fraud: Identity, 'Fake' Identity, Ransomware & Digital
David Shefter, Chief Technology Officer at Ziften Technologies,  6/14/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-12604
PUBLISHED: 2018-06-20
GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.
CVE-2018-10841
PUBLISHED: 2018-06-20
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start...
CVE-2018-12599
PUBLISHED: 2018-06-20
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.
CVE-2018-12600
PUBLISHED: 2018-06-20
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file.
CVE-2018-12601
PUBLISHED: 2018-06-20
There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.