Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
User Rank: Apprentice
7/19/2017 | 8:27:03 AM
CSO Magazine said this year that worldwide, there are 1 Million unfilled jobs. When you consider women in the network defender community, we find that they are almost non-existent. Forbes said last year that women make up only 11% of the cybersecurity workforce. If you add a minority to that checklist, say a black or Hispanic woman, that number drops to under 1%.
Clearly, if we are to close the gap, women and minorities have to be a source.
And we just can't tell our HR departments to hire more. Facebook, Google and others have all tried and failed.
Part of problem is that many women and minorities lose interest in STEM (Science, technology, engineering and math) subjects before they get to college. There are many reasons for this that have been well documented: male dominated culture turns women off, popular culture pushes women into "traditional" women's roles, minorities do not have access to strong STEM education, and others.
Another part of the problem stems from the cybersecurity old guard (Old white guys). We are the ones doing the hiring. We are the ones that tolerate sexism in the workplace when what we should be doing is stamping it out at every opportunity. We are the ones that are not mentoring the few minorities that do work for us and knocking down the obstacles that prevent them from succeeding.
This is the message that the network defender community should be hearing; especially from the old guard. Presenting that information at one of the most well-attended network defender conferences on the planet is a good place to do it.
Very respectfully,
Rick Howard
CSO
Palo Alto Networks
Full Disclosure: I am on Kelly's panel at Blackhat.