Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Twitter Acquires GeoAPI Creator Mixer Labs
Software allows users to map their Twitter posts to specific locations, though some worry about privacy
Smartphone Security Startup Offers Free Beta
Product to mix lightweight mobile client with cloud-based security, backup, and anti-theft features
Product Watch: IBM Replaces Passwords With Palm-Vein Biometrics In Single Sign-On
Fujitsu's PalmSecure LOGONDIRECTOR is integrated with IBM Tivoli Access Manager for Single Sign-On
Shadowserver Global Data Shows 'No One Is Immune' From Conficker
Russia, U.S., and Ukraine are home to highest numbers of Conficker-infected IP addresses
Old-School Botnet Still Thriving
New Trend Micro report details how IRC-based SDBOT is going strong with a new mission
Droid Smartphone Hacked
Exploit lets phone users gain administrative root access to Google Android-based phones
Microsoft Targets Enterprise Endpoint With New Products
New Web gateway leverages the cloud, and remote access gateway draws on identity
US-CERT Warns Of VPN Attack That Bypasses Browser Security
SSL VPN products from Cisco, Juniper Networks, SafeNet, and SonicWALL all vulnerable to attack that has "no solution"
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
