Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Not Much To Learn From The Second Kick Of The Mule
Repeating compliance and security failures shows a lack of progress
Startup Wraps User Tasks In Virtual Containers
Bromium announces micro-VM technology that protects the OS, network, from users' security missteps
The Compliance Officer's Dirty Little Secret
Fines may not equal cost of regulatory compliance, but they aren't the only cost of noncompliance
Ironman And Captain America Fight Over Compliance
Defending your company requires both warriors and soldiers
Security Startups Focusing On Threats, Not Malware
Stopping malware is so yesterday. Eclectic groups of security people have banded together to make life difficult for attackers
IT Pros Say Privileged Accounts Getting '0wned'
Businesses see insiders as the No. 1 threat, new survey says
Keep Watch On Accounts For Stolen Passwords
Log management and a well-refined ruleset can help companies pinpoint suspicious activity on accounts that suggest a password compromise
The Truth Is Not Believable
Too many businesses don’t want to know about their compliance problems
When Antivirus Fails, All Is Not Lost
Following Flame, Stuxnet, and Duqu, even the antivirus industry is questioning its ability to stop targeted attacks. Yet other technologies exist to catch malware in the corporate network
5 Ways You're Wasting Compliance Dollars
Fighting redundancy and ineffectual practices leaves more money for meaningful security
Systems Are Not Compliant; Organizations Are Compliant
IT cannot make your organization compliant
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
