Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Nissan Disables LEAF’s Remote Telematics System After ‘Profoundly Trivial’ Hack
All that is needed to gain access to any LEAF’s telematics system is the car’s VIN, researcher says.
Operation Dust Storm Hackers Set Sights On Japan's Critical Infrastructure
Japanese energy, oil/gas, and transportation industries the target of stealthy, patient cyber-espionage group.
Here Comes Locky, A Brand New Ransomware Threat
Infected Word files being used to spread ransomware, security researchers say.
Glibc Flaw Affects Thousands Of Linux Apps But How Dangerous Is It?
The difficulty involved in exploiting flaw could mitigate some of the risk, say some security researchers.
Ukraine Railway, Mining Company Attacked With BlackEnergy
Weeks after the malware played a role in a massive power outage in the Ukraine, BlackEnergy and its cohort KillDisk were used in other attacks as well, Trend Micro says.
US DOJ, DHS Yet To Confirm Breach, Leak
Apparent names, job titles, contact information of 9,000 Department of Homeland Security employees posted on Twitter.
Agriculture, Alternative Energy Could Be Chinese Hackers' Next Targets
Perhaps Anthem and Premera breaches were not just about stealing PII, but about researching the ins and outs of Western healthcare systems, CrowdStrike's annual global threat report says.
First Hacker Arrested for CyberTerror Charges Arrives In American Court
Kosovo citizen faces a maximum sentence of 35 years in prison for hacking and providing material support to ISIS.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
