Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
IAM: The Reason Why OWASP Top 10 Doesn't Change
OWASP's AppSec conference is easily one of the best in the infosec industry. Where will it be held this year? Why not Punxsutawney?
Should LulzSec Suspect Face Life In Prison?
Computer hacking, identity theft, and fraudulent credit card charges could add up to 30 years to life for alleged Stratfor hacker Jeremy Hammond.
Managing The Multi-Vendor Backup
Backup management applications go a step beyond monitoring, but they remain limited. It's time to develop a framework-driven approach.
Threats And Security Countermeasures
Big data and relational database protections are very similar. What's available to end users is not
Log All The Things
How the growing granularity in computing is going to affect monitoring
A Backhanded Thanks
As we recover from the Thanksgiving weekend, let's give our brand of security thanks for all the good (and not so good) in our world
The Business Of Commercial Exploit Development
A closer look at the debate surrounding this market
Take Two Aspirin And Steal My Data
HIPAA and information security aren't suggestions. They're the law
Threat Intelligence Hype
How to measure the IQ of the data you're being fed
All Security Technologies Are Not Data Loss Prevention
While security technologies may share the common goal of protecting an organization's sensitive data, not all can -- or should -- be called data loss prevention
Petraeus Mission Impossible: Cloaking Email, Online Identities
So-called security experts making basic information security errors isn't a new occurrence. Arguably, it even led to the rise of the Anonymous hacktivist collective.
When Cloud Met Mobile
Identity must link the disparate worlds of mobile and cloud
The Petraeus Affair: Surveillance State Stopper?
Lawmakers, now reminded of their own vulnerability, need to strengthen email privacy protections. Companies need to do more to help customers protect content.
Puzzle Logic
Authentication is an enduring mystery, but solving authorization puzzles may be a better use of your security resources
Consolidation At The Disk Backup Appliance
With a few enhancements, such as tape support and improved reporting capabilities, backup appliances could become the perfect solution for consolidating data protection.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
