Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
The Best Way To Spend Your Security Budget
One SQL injection attack can bring in big bucks. It's a no-brainer that you should make this problem top priority
Same As It Ever Was
Trade shows, booth babes, and hype aside -- who are you, and what can you do? That is the question. Enter XACML and ABAC
OPSEC Lessons From The Courtroom Sidebar
Jury duty leads to interesting observations on courtroom technology and operational security practices
Don't Blame China For Security Hacks, Blame Yourself
Focus on the sorry state of your information security defenses before worrying about the Chinese, Russians, hacktivists or cybercrime gangs.
You're A Piece Of Conference Meat
Every year folks get hacked off about seeing booth babes at big industry shows. Yet it seems too many don't understand why these ladies are there and how to disrupt these marketing tactics
The Road To Hell Is Authenticated By Facebook
OAuth allows us to log into many sites using familiar credentials, from Twitter, Facebook, Google or Microsoft. The main author of the original OAuth 1.0 spec says these giants took it and made OAuth 2.0 a monstrous, complex, and insecure mess that has already brought us significant vulnerabilities
Dark Reading Launches New Tech Center On Application Security
New Dark Reading subsite will offer news, analysis, and commentary on application security issues
Rashōmonitoring
When you don’t know who to believe
5 Overlooked Cloud-Based Compliance Dangers
Fully understanding risks helps avoid expensive surprises later
RSA: What To Watch For And What Vaccinations To Get Before Rocking The Casbah
Pro tip: It's not threats, it's not capabilities -- it's integration
iPhone Vulnerability: Return Of The Lock Screen Bypass
How do these errors resurface after being fixed? In Apple's case, the problem could be a weakness in their test plans or procedures
Security Analytics And Big Data
Does big data impact security?
3 Ways To Protect Cache Writes
Here's how to protect your storage from three situations that could cause it to lose data.
SIEMs Legit
Enough picking on SIEM; what are we doing right?
Restarting Database Security
Why companies ask for a database security program
Hacking, Privacy Laws: Time To Reboot
Recent cases highlight serious flaws in current privacy and cyber abuse legislation, allowing prosecutors to wield a hammer when a stick will do.
Is SCIM The Shim You Have Been Looking For?
SCIM is designed to solve common, real-world scenarios while managing users across cloud and enterprise domains, but incentives will drive its success
|
Everything You Need to Know About DNS AttacksIt's important to understand DNS, potential attacks against it, and the tools and techniques required to defend DNS infrastructure. This report answers all the questions you were afraid to ask.
Domain Name Service (DNS) is a critical part of any organization's digital infrastructure, but it's also one of the least understood. DNS is designed to be invisible to business professionals, IT stakeholders, and many security professionals, but DNS's threat surface is large and widely targeted.
Attackers are causing a great deal of damage with an array of attacks such as denial of service, DNS cache poisoning, DNS hijackin, DNS tunneling, and DNS dangling. They are using DNS infrastructure to take control of inbound and outbound communications and preventing users from accessing the applications they are looking for. To stop attacks on DNS, security teams need to shore up the organization's security hygiene around DNS infrastructure, implement controls such as DNSSEC, and monitor DNS traffic
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
