Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Q&A: FedRAMP Director Discusses Cloud Security Innovation
Maria Roat, FedRAMP director, speaks with former Transportation Department CIO Nitin Pradhan on the federal government's approach to security assessment, authorization, and continuous monitoring for cloud products and services.
Vanishing IT Security Boundaries Reappearing Disguised As Identity
It's that time of year, when nothing is as it seems. If cloud and mobile are haunting your dreams, consider some open protocol treats.
Identity Management In The Cloud
Managing and securing user identities in the cloud is getting complicated.
Verizon Enhances Cloud-Based Identity Platform
Universal Identity Services 2.0 comes with an updated mobile app, QR code-enabled access, and a simplified end-user interface.
Don't Let 'Spooks' Get Your Cloud Data
Lesson from National Cyber Security Awareness Month: Keys are the key, and keep it simple.
Monitoring Security In Cloud Environments
Using cloud networks can cause the loss of security visibility. Here are some tips for getting it back
5 Obamacare Health Site Security Warnings
Early shakedowns of the health insurance exchange websites show they are vulnerable to cross-site request forgery, clickjacking and cookie attacks, among other risks.
Online Health Exchanges: How Secure?
Is the data hub created by Obamacare a hacker's dream?
WordPress Attacks: Time To Wake Up
The latest WordPress hacks highlight our continued laziness when implementing online security, a problem made worse by free, easy-to-use sites.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
