Tech Center Vulnerability & Threats
Dark Reading's Vulnerabilities and Threats Tech Center is your resource for breaking news and information on the latest potential threats and technical vulnerabilities affecting today's IT environment. Written for security and IT professionals, the Vulnerabilities and Threats Tech Center is designed to provide in-depth information on newly-discovered network and application vulnerabilities, potential cybersecurity exploits, and security research results.
Featured Commentary
-
Kelly Jackson Higgins
News
-
Pushdo Botnet Morphs To Elude Hunters
U.S., other national government agencies, contractors, and military networks found housing new Pushdo bots as botnet adds stealthier features to evade detection, takedown
-
Study: Application Vulnerabilities Are No. 1 Threat
Shortage of training among developers is a key cause of high vulnerability rates, (ISC)2 survey says
-
Ten Emerging Threats Your Company May Not Know About
Some new attacks get a lot of attention. Here's a look at 10 that haven't, but ought to be on your radar
-
Fixes For Microsoft, Adobe Zero Days Out For Patch Tuesday
Busy patch cycle awaits administrator this month
-
Anonymous, LulzSec, OpUSA Plan Broad Attacks On Government Agencies, Banks On Tuesday
Hacktivist groups plan denial-of-service attacks on banks, government sites
More Stories
- Metasploit Module Released For IE Zero-Day Flaw Used In Labor Attack
- U.S. Department Of Labor Website Discovered Hacked, Spreading PoisonIvy
- Microsoft Discovers Trojan That Erases Evidence Of Its Existence
- Open Group Publishes Security Standard For Technology Supply Chain
By The Numbers
U.S. Number One In Spam With Attachments
But the attachments originating from the U.S. were the least malicious.
Source: AV-Test
Commentary
-
-
How Do You Use DAM For Blocking? You Don't
By Adrian Lane
Curiously, many view blocking malicious Web application requests via WAFs as the appropriate approach
-
Office 2003, Windows XP Support Ends In One Year
If you're still using Windows XP, then you won't let a little thing like unpatched public vulnerabilities stop you. But many Office 2003 users will be surprised to find themselves cut loose by Microsoft
-
You've Been Hacked, But For How Long?
One of the big themes at the recent RSA Conference was awareness of threats already inside the network. The way you learn about these threats and lower your ‘Mean Time To Know’ (MTTW) about an intrusion is with profile-based network monitoring
-
The Best Way To Spend Your Security Budget
By Larry Seltzer
One SQL injection attack can bring in big bucks. It's a no-brainer that you should make this problem top priority
Around the Web
Dark Reading Reports
-
Ten Emerging Threats Your Company May Not Know About
The devil you know is better than the one you don't. Never was that adage more true than in today's complex, ever-changing computing landscape. Unfortunately, new (and sometimes renewed) security threats are rising every day, putting IT and security pros in a defensive posture. In this Dark Reading report, we examine 10 emerging threats that you should have on your radar now.
-
Five Ways To Better Hunt The Zebras In Your Network
This issue of InformationWeek's Must Reads explores ways to protect vulnerable users in your company, lessons learned from the Evernote breach, how the FBI is improving enterprise insider theft detection and more.
Related Content
-
Security for Software Systems in the Cloud
The software industry has learned that putting fancy boxes on the network doesn't fix bad software, cloud converts must focus on the risks they bring along with the software they deploy. This paper details risks to software deployed in the cloud and what steps to take to mitigate that risk.
-
2012 HP Cyber Risk Report
Did you know it takes an average of 416 days to detect a security breach? Read the 2012 HP Cyber Risk Report to learn about the intelligence your enterprise needs to better understand how to deploy security programs to minimize risk and protect against a breach. Gain insight into the top vulnerability trends, web application vulnerabilities, mobile application security, as well as what to look for in the year ahead to keep your enterprise secure.
-
Know the Big Three
There is no question that mobile computing is growing at an exponential rate. This rapid transformation has seen security concerns outpaced by the ease of use, flexibility, and productivity of mobile devices. When vulnerabilities are exploited, the security of mission-critical data becomes a serious concern. In this this white paper, learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
-
Seven Steps to Security
After a decade of news detailing countless successful cyber-attacks, it's hard to imagine a corporation not understanding that they need a software security solution. However, building a comprehensive software security program can be overwhelming. Unlike implementing software quality assurance, the processes that go into making an application more secure are still relatively immature. Read this paper and learn seven practical steps you can begin today to secure your applications and prevent the damages a successful cyber-attack can bring.
-
Mobility Tech Dossier: There's an app for that but is it secure?
Companies can't move fast enough to meet customer and employee demand for mobile services. But security has eroded over the past decade as companies strive to create applications for multiple platforms by farming design and development out to subcontractors. This trend has strained the processes and governance put in place to ensure application security. It takes proven best practices to mitigate risk and embrace mobility without trepidation.
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.