Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
User Rank: Author
11/26/2015 | 1:54:33 AM
your pardon is granted. as with spam before it, spoofed source ddos and irresponsibly open servers have brought out every possible form of apologist. i have heard "there is no problem" and "it is not my problem" literally hundreds of times now. i won't take it personally, and i hope you won't take it personally when i tell you that you're plain and simply and completely wrong.
argument by analogy is fraught with error. as in this case, choosing the wrong analogy leads to absurd results. closer to the situation at hand would be holding the builder and architect of a house responsible if the house catches fire and burns the whole neighborhood down because somebody rang the doorbell too hard.
<< This all seems very huffy. The reality of crime is that bad guys often get away with their behavior, and we have to live with this unfairness lest we create even more unfairness. >>
you can live with whatever impositions you wish, but, you can't insist that i do the same. "the reality" as you call it is that in the real world, creating or operating a public nuisance is an actionable offense if someone is injured by it, and the internet has thus far yelled and screamed about "stifling innovation" whenever similar accountability and recourse has been proposed. well, i am not here to censor any content or demand that software creators be licensed or anything else that might stifle innovation.
rather, i'm saying that the collective nuisance cost of the internet's irresponsible device makers and server and network operators is now so high that even the most self deceiving apologist cannot successfully pretend that everything will be ok without giving the lawyers and insurance companies a more defined role.
vixie