Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
How Microsoft Cracks The BYOD Code: 3 Tips
Microsoft’s CISO shares best-practices for balancing employee autonomy and security in today’s bring-your-own world.
3 Mobile Security Tips For SMBs
Everyone in an organization has to work together to combat intrusions and data loss, but this is especially true for small businesses.
Why A Secured Network Is Like The Human Body
It’s time to throw away the analogies about building fortresses and perimeter defenses and start to approach InfoSec with the same standard of care we use for public health.
Cloud Security: Think Today’s Reality, Not Yesterday’s Policy
SaaS, BYOD, and mobility are inseparable, yet time and time again companies attempt to compartmentalize the three when they make a move to the cloud. That's a big mistake.
Crowdsourcing & Cyber Security: Who Do You Trust?
A collective security defense can definitely tip the balance in favor of the good guys. But challenges remain.
Dark Reading Radio: RAT Exterminators
Join us Wednesday, June 25, at 1:00 p.m. ET for a conversation with Adam Meyers, director of intelligence for CrowdStrike.
P.F. Chang's Breach Went Undetected For Months
Early reports indicate that the compromise involved a large number of restaurant locations and dates as far back as September 2013.
Flash Poll: Critical Skills Gap In Threat Intelligence
Our latest poll reflects members’ concerns over how to stay on top of the latest attack trends, defenses, and technologies.
What Workplace Privacy Will Look Like In 10 Years
New laws like Europe's "right to be forgotten" in Google search are just the latest examples of how quickly perceptions and practices about personal privacy in the workplace are changing.
Data Security Decisions In A World Without TrueCrypt
The last days of TrueCrypt left many unanswered questions. But one thing is certain: When encryption freeware ends its life abruptly, being a freeloader can get you into a load of trouble.
Dark Reading Radio: The Human Side Of Online Attacks
Today's DR Radio show offers a look at phishing, social engineering, and the weakest link in the cyber defense chain: humans. Showtime is 1:00 p.m. EDT.
The Problem With Cyber Insurance
Insurers have yet to develop an evidence-based method to assess a company's cyber risk profile. This can result in high premiums, low coverage, and broad exclusions.
A Roadmap for CIOs & CSOs After the Year of the Mega Breach
The journey starts with three steps: Engage the C-suite, think like a hacker, and look at the big picture.
Heartbleed & The Long Tail Of Vulnerabilities
To this day there are still unpatched systems, still hackers scanning for vulnerable systems, and still cyber criminals using Heartbleed every day to break into companies.
Monitor DNS Traffic & You Just Might Catch A RAT
Criminals will exploit any Internet service or protocol when given the opportunity. Here are six signs of suspicious activity to watch for in the DNS.
Don’t Let Lousy Teachers Sink Security Awareness
You can't fix a human problem with a technology solution. Here are three reasons why user education can work and six tips on how to develop a corporate culture of security.
Putter Panda: Tip Of The Iceberg
What CrowdStrike's outing of Putter Panda -- the second hacking group linked to China's spying on US defense and European satellite and aerospace industries -- means for the security industry.
Women in InfoSec: Building Bonds & New Solutions
Learning, camaraderie, and fighting the good fight are just three reasons these women are trailblazing careers in InfoSec.
Dark Reading Radio: Breaking the Glass Ceiling in InfoSec
Join the discussion about the challenges and rewards of being a woman in IT security from the vantage point of three accomplished security professionals. Wednesday, June 11, 2014 at 1:00 p.m. ET
If HTML5 Is The Future, What Happens To Access Control?
The solution for multi-device deployment is HTML5. The challenge, for the enterprise, is deploying it correctly. Here are seven tools you will need.
Safely Storing User Passwords: Hashing vs. Encrypting
Securing user information begins with a proper understanding of security controls and the protection of user passwords using modern hashing algorithms. Here's a quick review of the fundamentals.
Compliance: The Surprising Gift Of Windows XP
The end of Windows XP will force organizations to properly reinvest in a modern and compliant desktop infrastructure that will be easier to maintain and secure.
Dark Reading Radio: Pay Up Or Never See Your Data Again
Learn how ransomware is raising the stakes, and what law enforcement and the security community are doing about it.
How The Math Of Biometric Authentication Adds Up
Yes, it's true that if your authentication scheme only allows a single fingerprint you only have 10 choices. But there's no rule that says it has to be one, and only one.
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
