Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
As Deadline Looms, 35 Percent Of Web Sites Still Rely On SHA-1
Over 60 million web sites are relying on a hashing algorithm that will be blocked by major browsers starting Jan 1.
Active Defense Framework Can Help Businesses Defend Against Cyberattacks
New report provides a framework that lets private sector entities defend themselves while at the same time protect individual liberties and privacy, and mitigate the risk of collateral damage.
Internet Of Things 'Pollutants' & The Case For A Cyber EPA
Recent IoT-executed DDoS attacks have been annoying, not life threatening. Should device makers be held liable if something worse happens?
Dark Reading Radio: 'Bug Bounties & The Zero-Day Trade'
Join us, HackerOne's Alex Rice, and Veracode's Chris Wysopal for the next episode of Dark Reading Radio, today, Wednesday Nov. 16, at 1pmET.
TAG Unveils Anti-Malware Certification For Online Ad Industry
As the ad industry continues its fight against malware, the Trustworthy Accountability Group launches a threat-sharing hub to provide intelligence on attacks.
Dark Reading Virtual Event Seeks To Break Security Myths, Conventional Wisdom
Three keynotes, two panel sessions offer new ways to think about enterprise information security.
How ‘Security Scorecards’ Advance Security, Reduce Risk
CISO Josh Koplik offers practical advice about bridging the gap between security and business goals in a consumer-facing media and Internet company.
US Governors Affirm Confidence In Cybersecurity Of Election Systems
Statement from National Governors Association say presidential election outcome will accurately reflect voters’ choice.
WeMo IoT Vulnerability Lets Attackers Run Code On Android Phone
Vulnerabilities in Belkin's WeMo home automation device, now fixed, could exploit Android smartphones or grant root to WeMo.
Anthem Breach Victims Go To Court Over Cybersecurity Audit Release
Class-action lawsuit against health insurer seeks disclosure of network security details following data breach of 80 million members.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
