Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
A report from the GAO highlights cyber-security issues tied to the SEC's lack of oversight of a contractor during a system migration.
Security vulnerabilities in many satellite telecommunications systems leave them open to hackers, raising potential risks for aviation, shipping, military and other sectors.
The update includes fixes for critical vulnerabilities in Java SE and other products.
A new survey of nearly 600 IT pros found that it takes on average 140 days to find breaches due to SQL injection attacks and 68 days to remediate them.
Web browsers may be overloaded by the overhaul of security certificates, leading to error messages and impacting Web performance.
Dell SecureWorks has added Advanced Endpoint Threat Detection (AETD) as the latest solution in its Advanced Threat Services portfolio.
British parenting website Mumsnet is the latest organization to have been hacked due to the "Heartbleed" bug, founder Justine Roberts revealed.
Akamai Technologies admitted some custom code it thought protected users against the Heartbleed vulnerability is flawed.
Personal data for as many as 900 Canadian taxpayers was stolen after being made vulnerable by the "Heartbleed" bug, officials in Ottawa said on Monday.
CloudFlare was able to confirm that an attacker can retrieve a server's private SSL key by exploiting the "Heartbleed" Vulnerability.
- 1 of 111
- ››
FEATURES, INSIGHTS // Virus & Threats
A threat is the agent that takes advantage of a vulnerability. This relationship must be a key factor in the risk assessment process and can no longer be treated as risk’s neglected step child.
Many continue to click on links or attachments sent via email without taking any steps to verify the origin of the email or the validity of the link or attachment. It only takes one click to for an attacker to establish a foothold in the target’s systems.
Here are five things I recommend security pros keep in mind when navigating the line between tight security and keeping the organization running at peak proficiency.
Whether you’re buying a smart refrigerator for your home or a printer for your company, your first step is deciding the risk involved and how to deploy the device in a secure manner while preserving the functionality you require.
Predictive security narrows the scope considerably and helps IT and security pros zero-in on the most likely vulnerabilities and areas most-at-risk due to the sensitive nature of the data they hold.
Vulnerabilities are a fact of life. Independent testing may be illegal without express permission, but that doesn’t stop code pillagers from sniffing out vulnerabilities and weaknesses in your web applications.
Social engineering attacks can happen at any time. Here are some strategies you can use to help reduce the chances of a successful social engineering/phishing attack you or your organization.
Without putting vulnerabilities into the context of the risk associated with them, organizations often misalign their remediation resources.
Complacency is never a good thing, but in security it can have devastating effects. While it’s good to acknowledge progress, that should never stand in the way of staying ahead of the next potential threat.
Just as offices need to detect break-ins to keep criminals from committing industrial espionage, enterprises need to put more focus on detecting APTs and other advanced threats to keep adversaries from their network.
- 1 of 13
- ››
Subscribe to SecurityWeek
- Brazil Passes Trailblazing Internet Privacy Law
- NIST Pulls Dual_EC_DRBG Algorithm from Random Number Generator Recommendations
- DDoS Attacks Prove Costly, Could Top 800 Gbps in 2015: Research
- Cyber Risks Can Cause Disruption on Scale of 2008 Crisis: Study
- Attacks Targeting Cloud Hosting Providers Rise: Alert Logic
- 2014 SecurityWeek Golf Classic to Take Place May 22 at Half Moon Bay
- Cisco Unveils New Managed Threat Defense Service
- Cyber Attack Exercise Reveals Information Sharing Struggles in Healthcare Industry
- CrowdStrike Releases Heartbleed Scanner
- App Quest: The Need for Web Application Security
Copyright © 2014 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use