Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Impermium Study Unearths Consumer Attitudes Toward Internet Security
Study explored Americans' limited adoption of two-factor authentication
Black Hat Releases Official Schedule
With 110 unique Briefings and workshops, Black Hat USA boasts nearly 94 hours of high-intensity research and vulnerability disclosure
CSA Establishes New Incident Management Working Group; Issues First Report
Group will focus on the examination of incident handling and forensics in cloud environments
Splunk Launches Hadoop Exploration And Analysis
Hunk: Splunk Analytics for Hadoop integrates exploration, analysis, and visualization of data in Hadoop
FDA Shuts Down 9,600 Illegal Pharma Websites
Many of these sites appeared to be operating as a part of an organized criminal network
Renowned Security Expert Bruce Schneier Joins EFF Board Of Directors
Schneier is widely acclaimed for his criticism and commentary on everything from network security to national security
Pindrop Security Names New VP Of Global Sales
Michael Hughes has more than 25 years of experience in tech sales, mainly focused on fraud and risk management solutions
Skybox Security Releases Data On Its Approach To Vulnerability Management
Results came from analysis of customer deployments and customer lab tests
Good Technology Introduces New Security Solutions
Good Dynamics Secure Mobility Platform enables the containerization and management of mobile apps and data
CSA Announces Keynotes & Sessions For Annual CSA Congress 2013
Speaker lineup will include some of the most prominent enterprise leaders and recognized cloud experts
U.S. Cellular Expands Relationship With NQ Mobile For Mobile Security And Privacy Android Apps
U.S. Cellular to offer NQ Mobile Security and NQ Mobile Vault products
RainStor Major Product Update Delivers Enterprise-Grade Security, Search On Hadoop
New security features including data encryption, masking and identity management
Cylance Announces Free Endpoint Technology
CylanceDETECT now ready for broad beta consumption
Thales Finds Organizations More Confident Transferring Sensitive Data To The Cloud Despite Data Protection Concerns
Study reveals surprising attitudes about who is considered responsible for protecting data in the cloud
Arbor Networks Enhances The Pravail APS Enterprise DDoS Mitigation Solution
Enhancements include customized network tuning, multidevice management capabilities, and enhanced SSL protection
41st Parameter Reveals Top Five Cyber Crime Threats Facing Global Financial Institutions
Report includes insights and expert advice to fighting mobile vulnerabilities, malware, DDoS, industrialized fraud, and more
Raytheon BBN Technologies Chief Scientist Stephen Kent Inducted Into Internet Hall Of Fame
Kent developed the world's first Transmission Control Protocol (TCP) end-to-end encryption system
WhiteHat Security Grants Patent Licenses To Cenzic
Agreement also grants WhiteHat a patent license from Cenzic
Content-Aware Data Loss Prevention (DLP) For Mac OS X Released Today By CoSoSys
Content Aware Protection for Mac by Endpoint Protector reports file transfers to removable devices, online applications, and to the cloud
Lookout: 1 Million Consumers Have Adware
Lookout Mobile Security app for Android will now flag ad networks that do not comply
Survey Shows Consumer Concern About Cloud Services Is Nothing New
Six out of 10 consumers are concerned about storing content in social networking and cloud storage services, according to F-Secure
Survey: Cyberattacks Greater Threat Than Physical Attacks
Cyber-Ark's 7th annual Global Advanced Threat Landscape survey found 80 percent of respondents believe cyberattacks pose a greater threat to their nation than physical attacks
PasswordBox Offers Free Password Manager
App uses a machine learning algorithm that works with more websites over time
Lancope Announced Tighter Integration With Cisco
Lancope will also join the recently announced Cisco Security Technology Partner Ecosystem and Platform Exchange
Ponemon Survey: Majority Of Organizations Committed To Risk-Based Security Management
Protection of intellectual property a key business objectives for 88 percent of respondents
Small To Midsize Businesses Continue Migration To Cloud-Based Business Applications
Dropbox, Google Apps, Citrix GoToMeeting and Evernote top list of employee favorites
Biometric Authentication Provides Better Mobile Device Security, Heavy Reading Finds
Drive behind biometric authentication on smartphones will occur from both the consumer and enterprise, report says
Centrify And Dropbox Partner To Enable Secure Access For Dropbox For Business
Centrify Cloud Service simplifies the deployment of federated identity for Dropbox SSO
Dell Offers Secure Commercial PCs With New Encryption, Advanced Authentication, And Malware Protection Solutions
Encryption protects data at the file level
Vista Equity Partners Announces Successful Completion Of Cash Tender Offer For Shares Of Websense, Inc.
Tomahawk Merger Sub, Inc. now owns at least 90 percent of the outstanding shares of Websens
Digital Defense Announces New Offering To Thwart Social Engineering Attacks
Cyber Crime Prevention & Safety Program developed to help organizations of all sizes create and sustain a culture of security
Frost & Sullivan: Criminal Hackers Run Huge Markets Of Information For Sale Upon Request
You may think you have never been hacked. . .you just have not realized it yet
Integralis Launches Single Global Brand, WideAngle,and Announces Plan To Change Name To NTT Com Security
WideAngle will provide customers with a holistic approach to information security and risk management
Patricia Titus Joins CyberUnited's Board
Most recently, she served as vice president and chief information security officer at Symantec
Risk I/O Adds Real-Time Attack Data To Vulnerability Intelligence Platform
Latest version correlates real-time attack data against a company's vulnerabilities to help identify where they are most likely to be attacked
Bayshore Networks Announces Technology Partnership With SecurView
SecurView will work closely with Bayshore to serve large enterprise, government, and critical infrastructure customers
New Barracuda Web Filter Models Feature 10 GbE Interfaces
New models feature increased performance and capacity to offer comprehensive Web content filtering and malware protection at multigigabit speeds
Symantec Reveals Global SMB IT Confidence Index
Findings show that SMBs with higher index scores are able to better manage increasing computing complexity while spending less on IT than those with lower scores
Kickstarter Debut: SnoopWall Stops Cyber Spying, Snooping, And Stealing
SnoopWall blocks remote access to mobile devices by protecting data-leakage ports
Sophos Launches Complete MSP Security
MSP-focused solution offers complete protection for networks, endpoints, and mobile devices
Start-Up Intros Memory Encryption To Secure Data In Use
PrivateCore vCage software protects data in use with full memory encryption
McAfee Report Reveals Businesses Failing To Harness Big Security Data To Protect Against Threats
Only 35 percent of businesses say they can actually detect security breaches within minutes
F-Secure Launches DeepGuard 5
DeepGuard 5’s exploitation protection monitors the processes of programs that are commonly exploited
Trend Micro And INTERPOL To Collaborate
Trend Micro will deliver training programs to INTERPOL
Coverity Joins Open Web Application Security Project OWASP
OWASP organization is focused on improving the security of software by making software security visible
Malwarebytes Acquires ZeroVulnerabilityLabs
The acquired technology, ExploitShield, has been used to block exploits before they are publicly disclosed
Mobile Helix Introduces Link, A Pure HTML5 Application Development Platform
Link creates a common application environment by deploying applications through Internet browser
Qihoo 360 Discovered Serious Smishing Vulnerability In Samsung Galaxy S4
Vulnerability is related to the "cloud backup" feature of Galaxy S4
Clavid Launches Authentication As A Service
Clavid enables users to combine the authentication methods that are already in place so they can use one single login to access all Internet services
SearchYourCloud Broadens Security And Search Capability To Android And Google Drive
Android users can safely secure content in the cloud without worry over unintended access concerns
|
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
