Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
5 Ways To Think Like A Hacker
Security expert says CISOs need to use simulations more effectively so they can understand how hackers work and beat them at their own game.
Bug Poachers: A New Breed of Cybercriminal
As if security researchers don't have enough to worry about, we now have to contend with extortionists who take advantage of the well-established fact that applications are a ripe target for exploitation.
Singapore To Cut Internet Access For Government Computers
To counter cyberattacks, 100,000 computers will be taken offline next May.
Zcrypt Ransomware: Old Wine In A New Bottle
Malware authors have combined old and new approaches to try and sneak Zcrypt past defenses, Check Point says.
‘Super Hunters’ Emerge As More Companies Adopt Bug Bounties
'Super hunters' chase down vulnerabilities wherever there's a bug bounty payday...and they've become very popular with cybersecurity job recruiters, says Bugcrowd report.
Enterprises Still Don't Base Vuln Remediation On Risk
New White Hat study shows critical vulnerabilities aren't fixed any faster than other security flaws.
Top Security To-Dos For The Entertainment Industry
'The biz' has unique security needs. And it isn't only about preventing 'the next Sony.'
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
