Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
CISO Still Viewed As Tech Not Business Leader
RSAC/ISACA study shows only one in seven CISOs report to CEO.
The ROI Of Infosec: 11 Dos and Don’ts For Management Buy In
The case for a bigger bottom line depends on how well you argue that the business can’t run without a specific level of security infrastructure.
So You Want to Be a Security Researcher?
Security researchers need a broad set of skills to investigate a constantly-changing threat landscape. But specializing in areas such as reverse engineering or network forensics will boost opportunities.
Security Lessons From My Doctor
Why it’s hard to change risky habits like weak passwords and heavy smoking, even when advice is clear.
The Week In Justice: 3 Confessions, 2 Convictions & 2 Years For Two Hackers
Courts obtain convictions and guilty pleas from those involved with 'largest known' hacking and securities fraud scheme, online hacking forums, celebrity photo theft, and malicious insider destructive attacks.
Public Vs. Private: Is A Prestigious Infosec College Degree Worth It?
Today's graduates coming into the information security industry from private universities aren’t ready for the workforce.
Hospital Hacktivist Arrested In Miami After Failed Escape Attempt
Boston Children's Hospital hacker's flee to Cuba foiled by troubles with getaway boat.
Security Lessons From My Car Mechanic
What an unlocked oil pan taught me about me about the power of two-way communication between security pros and the organizations they serve.
A Not-So-Secret Secret About Cybercrime
Cybersecurity is an issue business leaders fret a lot about in public, but they rarely treat the problem as a real and immediate threat.
How To Retain Good Security People: Keep The Work Exciting
Security managers should foster a challenging but rewarding work environment and invest in training to keep their security teams intact.
Perceptions Of IT Risk Changing In Business Ranks
Business leaders increasingly see IT risk as huge, but policy making and visibility still lag.
The Phishie Awards: (Dis)Honoring The Best Of The Worst Phishing Attacks
From the costly to the clever to the just plain creepy, here are the recent phishing campaigns that have earned our reluctant recognition.
Is The Cybersecurity Bubble About To Burst?
Cybersecurity stocks are way down in 2016 so far, but venture capital money still flows.
Monday Morning Quarterbacking Super Bowl 50: Infosec Edition
How to coach your team to victory in the battle to protect corporate data and intellectual property. After all, there’s a lot riding on your game, too.
New Kid On The Block: Cyber Threat Analyst
Drawing from the financial service industry, this new role uses the “art of the intelligence cycle” to drive efficiency in the security operations center.
EU, US Agree On New Data Transfer Pact, But Will It Hold?
So long Safe Harbor, hello 'Privacy Shield.'
The Cybersecurity Talent You Seek May Be In-House
IT staff in many cases are already performing security-related work -- with proper training, they could be converted to the security team.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
