Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Oracle Buys Another ID Company
Oracle purchases Bridgestream, its fifth identity and access management acquisition, for $35 million
Storm Hits Blogger
The ubiquitous Storm Trojan has found a new home - on spam blog sites in Google's Blogger network
Enterprises Wrestle With Security Policies
Corporate security policies often are not enforced, according to newly-published survey by RSA and Forrester
New Intel Processor Fights Rootkits, Virtualization Threats
But experts say new features still aren't true anti-rootkit technologies
Eight Sure-Fire Ways to Beat a Security Audit
Experts share tips on how to avoid the most common pitfalls in an audit
UK Plans Big Spend on ID Management
Public-sector spending will increase 50 percent in the next year alone, new study says
Site Services Pay Damages for Bill-Doctoring
Website services put $24 million worth of unauthorized charges on customers' bills, FTC says
Medical IT Contractor Folds After Breaches
Blamed for privacy breaches at five different hospitals, Verus Inc. silently closes its doors
Back to School: Backpacks, Books & Bots
Universities brace for increase in security breach attempts as students - and profs - return to campus
Visa Eases PCI Compliance Penalties
Deadlines extended, some fines may be reimbursed if merchants act quickly
New Bank Practices Make Hacking Easier
New multifactor logon procedures actually improve attacker's chances of breaking in, expert says at DefCon
'Sidejacking' Tool Unleashed
Lets attackers sniff and access Web accounts over WiFi
FTC Questions Use of SSNs
Study aims to restrict unnecessary use of Social Security information
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
