Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Cyberspying Campaign Comes With Sabotage Option
New research from Symantec spots US and Western European energy interests in the bull's eye, but the campaign could encompass more than just utilities.
As Stuxnet Anniversary Approaches, New SCADA Attack Is Discovered
F-Secure has unearthed a new attack against industrial control systems that goes after European targets, using rare infection vectors.
Luuuk Stole Half-Million Euros in One Week
A man-in-the-browser and a big team of money mules quickly, systematically robbed 190 account holders at a European bank.
Crowdsourcing & Cyber Security: Who Do You Trust?
A collective security defense can definitely tip the balance in favor of the good guys. But challenges remain.
P.F. Chang's Breach Went Undetected For Months
Early reports indicate that the compromise involved a large number of restaurant locations and dates as far back as September 2013.
A Dyre New Banking Trojan
Newly discovered RAT sneaks by SSL and steals victims' banking credentials.
New Commercialized Trojan Takes Fresh Approach To Password-Stealing
Unlike most banking malware of today, new Pandemiya skips the Zeus source code and starts from scratch.
Putter Panda: Tip Of The Iceberg
What CrowdStrike's outing of Putter Panda -- the second hacking group linked to China's spying on US defense and European satellite and aerospace industries -- means for the security industry.
Global Effort Disrupts GOZeuS Botnet, CryptoLocker; One Indicted
An international public-private collaboration involving security companies and law enforcement agencies in 11 countries aims to disrupt the underlying infrastructure of the cybercrime industry.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
