Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Silent Authentication
Authenticating users without explicit login
The Value Of Device Authentication
'Fingerprinting' evolving to protect device IDs
The Mechanics Of Breach Notification
Organizations need to know what constitutes a breach of identity data according to state laws and how to respond
Google Study: Social Media Enhances Privacy
Sharing can shape your reputation, thereby building trust and privacy, Google research says. "Clean coal," meet "privacy-aware sharing." Let the oxymoron wars begin.
Looking Over The RIM And Into The Chasm
What security folks need to learn from RIM's stunning downfall
9 Ways To Minimize Data Breach Fallout
Symantec just revealed that attackers stole source code to its flagship Norton software in 2006, highlighting today's array of sharply different approaches to owning up to data breaches. Consider these essential policies.
Breach Notification: Know The Rules
State and federal laws require notification when a breach of protected information occurs. You need to know which laws apply and how to comply
SOPA: Stop Grandstanding, Start Crafting An Alternative
If Congress is so clueless about Internet dynamics, it's up to SOPA opponents to create a workable alternative for stopping online content piracy.
I Left My Data In El Segundo
Data is the new bit of lost clothing you left behind on that road trip -- and two-factor authentication VPN is the way to go mobile
A Firsthand Piracy Experience
Limited government support of intellectual property helps, but not the strong protections in SOPA/PIPA
How To Monitor Employees Without Being A Perv
While we need to monitor our employees to protect organization secrets, there's no need to turn the workplace into a bad episode of Big Brother
Identity Versus Authentication
Distinguishing between identity and authentication
2012 Will Be The Year Of The...
After a rough 2011 for many large organizations, here's a look at what the world of advanced threats will bring in 2012
Partner Management 3: How To Assess Prospective Partners
Regulations require organizations to periodically assess security and compliance practices; the key is to understand how to do so effectively -- without breaking the bank
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
