Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Malware Markets: Exposing The Hype & Filtering The Noise
There’s a lot of useful infosec information out there, but cutting through clutter is harder than it should be.
The Hidden Dangers Of 'Bring Your Own Body'
The use of biometric data is on the rise, causing new security risks that must be assessed and addressed.
Apple Releases Patch For 'Trident,' A Trio Of iOS 0-Days
Already rolled into the Pegasus spyware product and used to target social activists, the vulnerabilities are fixed in iOS 9.3.5.
A Temperature-Check On The State Of Application Security
AppSec is more dangerous than network security but receives less than half the funding, according to new Ponemon study.
Attacker's Playbook Top 5 Is High On Passwords, Low On Malware
Report: Penetration testers' five most reliable methods of compromising targets include four different ways to use stolen credentials, but zero ways to exploit software.
Newly Announced Chipset Vuln Affects 900 Million Android Devices
Check Point Research Team details four vulnerabilities that can easily lead to full privilege escalation.
Dark Reading News Desk Coming Back To Black Hat, Live
Live from Las Vegas: over 40 video interviews with Black Hat USA conference speakers and sponsors. Wednesday Aug. 3, Thursday Aug, 4, starting at 2 p.m. ET.
Hacker Creates Software Ratings System
The new formula to rate computer software could force creators to perform better, says Peiter ‘Mudge’ Zatko.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
