Vulnerability Management

As a result of browser market consolidation, adversaries can focus on uncovering vulnerabilities in just two main browser engines.

Transitive dependencies can complicate the process of developing software bills of materials.

There were a record number of zero-day attacks last year, but some basic cyber-hygiene strategies can help keep your organization more safe.

Researchers have created a new community website for reporting and tracking security issues in cloud platforms and services — plus fixes for them where available.

LockBit 3.0 promises to 'Make Ransomware Great Again!' with a side of cybercrime crowdsourcing.

If you haven't properly addressed the issue, you're already behind. But even if you've had a false start, it's never too late to get back up.

Continuous monitoring is key to keeping up with software-as-a-service changes, but that's not all you'll need to get better visibility into your SaaS security.

The concept might make us sharp and realistic, but it's not enough on its own.

Researchers have spotted the threat group, also known as Fancy Bear and Sofacy, using the Windows MSDT vulnerability to distribute information stealers to users in Ukraine.

Deep-dive study unearthed security flaws that could allow remote code execution, file manipulation, and malicious firmware uploads, among other badness.

Only about half of firms have an open source software security policy in place to guide developers in the use of components and frameworks, but those that do exhibit better security.

Most of the attacks involve the use of automated exploits, security vendor says.

A secure Web browser takes the top prize, and for the second year in a row malware detection is an afterthought.

While CISOs may feel more confident in their security posture emerging from the pandemic, new research suggests that doesn't mean organizations are better prepared for large-scale attacks.

Martyn Ryder from Morphean explains why forging trusted partnerships is integral to the future of physical security in a world of networks, systems, and the cloud.