Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Xen Patches 'Worst'-Ever Virtual Machine Escape Vulnerability
Bug remained undetected for seven years and enabled complete control of host system.
15-Year-Old Arrested For TalkTalk Attack
U.K. police collar Northern Ireland youth for questioning, while security industry tries to make sense of confusing information out of TalkTalk CEO.
Navigating New Security Architectures For Cloud Data Centers
Micro-segmentation is a revolutionary approach to data center complexity and security. But not all architectures are created equal.
Former White House Advisor: Marry Infosec To Economics
Melissa Hathaway, former cybersecurity policy advisor to the White House, says the security and economy agendas should go hand-in-hand, and Western nations' use of surveillance technology is 'alarming.'
Survey Shows Little Accord On Responsibility For Cloud Security
With procurement teams and business groups doing most vendor selection and vetting, IT groups have little role in security.
Researchers Warn Against Continuing Use Of SHA-1 Crypto Standard
New attack methods have made it economically feasible to crack SHA-1 much sooner than expected.
What The EU’s Safe Harbor Ruling Means For Data Privacy In The Cloud
The European Court of Justice today struck down the 15-year-old data transfer agreement between the European Union and the US. Here’s how to begin to prepare for the fallout.
Amazon Downplays New Hack For Stealing Crypto Keys In Cloud
Attack works only under extremely rare conditions, cloud giant says of the latest research.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
