Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Defining Security: The Difference Between Safety & Privacy
Words matter, especially if you are making a case for new security measures, state-of-the-art technology or personnel.
No-Name Security Incidents Caused as Many Tears as WannaCry, Pros Say
Half of security pros say they've worked just as frantically this year to fix other incidents that the public never heard about.
Two Arrested for Microsoft Network Intrusion
UK authorities arrest two men for allegedly breaking into Microsoft's network with the intent to steal customer data from the software giant.
KPMG: Cybersecurity Has Reached a ‘Tipping Point’ from Tech to CEO Business Issue
Still, a majority of US-based chief execs say they will be maintaining and not investing in security technology over the next three years, a recent study shows.
Dark Reading INsecurity Conference Registration Now Open
November event will focus on attendee interaction, "blue team" best practices.
Feds Call on Contractors to Play Ball in Mitigating Insider Threats
It's said that you're only as strong as your weakest player. That's as true in security as it is in sports.
Lack of Experience Biggest Obstacle for InfoSec Career
A majority of wanna-be infosec professionals find they need more experience to be a contender to enter this career, according to a recent Tripwire poll.
By the Numbers: Parsing the Cybersecurity Challenge
Why your CEO should rethink company security priorities in the drive for digital business growth.
From Reporter to Private Investigator to Security Engineer
How I fell in love with coding and traded in a camera-rigged Prius for a MacBook and a GitHub account.
Cybersecurity Faces 1.8 Million Worker Shortfall By 2022
(ISC)2 report shows the skills shortage is getting worse.
Why Compromised Identities Are IT’s Fault
The eternal battle between IT and security is the source of the problem.
Cybersecurity Stands as Big Sticking Point in Software M&A
The breach that was the fly in the ointment of the Yahoo-Verizon deal is one of many now surfacing as security of acquired firms starts to become a point of negotiation.
Number of CISOs Rose 15% This Year
Although the number of CISOs increased to 65% of organizations, it could just be a case of "window dressing," new ISACA report shows.
Securely Managing Employee Turnover: 3 Tips
Don't let the process spiral into organizational chaos. Here are steps you can take to keep your company safe.
Hollywood Film Studio Seeks Up-And-Coming Hackers for Reality TV Show
New program on major cable network will feature competitions, personalities.
Internet Society Takes On IoT, Website Security, Incident Response via OTA Merger
What happens now that the Online Trust Alliance - which includes Microsoft, Symantec, Twitter, and other big names - will be under the umbrella of the global Internet organization?
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
