Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
New Trojan Evades Banks' Anti-Fraud Systems
'URLZone' calculates how much money to steal from a victim's account without raising suspicion
IRS virus demonstrates stupidity is rampant
The proliferation of the current IRS virus demonstrates stupidity is rampant on the Internet.
Cybercriminals Offer 43 Cents For An Infected Mac
Sophos researcher offers a peek at the inner workings of an infamous Russian affiliate network
Spuds And Spam: Idaho No. 1 Most Spammed State
MessageLabs reveals list of U.S. states that get the most spam
Up To 9 Percent Of Machines In An Enterprise Are Bot-Infected
Most are members of tiny, unknown botnets built for targeting victim organizations
New 'Chat-In-The-Middle' Phishing Attack Discovered
Phishers go Web 2.0 by chatting it up with their online banking victims
Symark Buys BeyondTrust, Takes BeyondTrust Name
Merged company will work to integrate privilege management in Unix, Windows environments
New iPhone Anti-Phishing Feature Fails
Researchers discover iPhone OS 3.1's anti-phishing feature is not working properly
Men Reuse Passwords More Than Women, Study Says
More than half of French users reuse passwords, PC Tools survey finds
Infected PCs Contain Average Of Three Different Types of Malware
New Eset scan data reflects cybercrime trends in malware creation, installation, AV firm says
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
