Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Up-And-Coming Botnet Uses Same Malware Kit As Defunct Mariposa
'Butterfly bot' kit steals financial information, but its licensing model could ultimately lead authorities to its newest botmasters
LulzSec Went After Qakbot, Mariposa Bots
Meanwhile, Anonymous offering bot-herding, other hacker training for its recruits via IRC, security expert says
New Chubb Service Helps Businesses Minimize Fallout From Data Breach
Service is available through eRisk Hub
Former College Kid's Guilty Plea To Hacking Highlights Low-Tech DB Theft
Defendants targeted university's databases of faculty, staff, alumni, and student information, and financial accounts with a social engineering scheme that used poisoned USBs, phishing emails
Two Fake AV Rings Busted By FBI In 'Operation Trident Tribunal'
Reports out of the Ukraine appear to indicate that the Conficker worm might have been one of the vehicles for spreading the scareware
Spear Phishers Aiming At SMBs
Pilfered email addresses and personal information from Epsilon and Sony breaches will make attacks on SMBs even more likely
Breach Patrol: When Should Customers Be Told?
Speed of notifications seems to be a key question now
Russian Company Tests ATM That Can Detect Faces, Lies
Souped-up authentication includes voice recognition, facial recognition -- and a lie detector
Court Ruling Puts Security Burden On SMBs, Not Banks
Security experts cry foul in U.S. District Court ruling in $500,000 online bank account heist from construction firm
Replacing RSA SecurID Tokens Not So Simple
There are plenty of in-house logistics -- and no guarantees that the new tokens won't be eventually compromised, security experts say
Google Reveals Attack On Gmail
Hundreds of personal accounts, including those of senior U.S. government officials, are affected
For Malware Developers, Mac Moves From Safe Zone To Target Zone
Growth of mobile devices, shortage of strong defenses make Apple look appetizing to authors of malicious code
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
