Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
British parenting website Mumsnet is the latest organization to have been hacked due to the "Heartbleed" bug, founder Justine Roberts revealed.
Akamai Technologies admitted some custom code it thought protected users against the Heartbleed vulnerability is flawed.
Personal data for as many as 900 Canadian taxpayers was stolen after being made vulnerable by the "Heartbleed" bug, officials in Ottawa said on Monday.
CloudFlare was able to confirm that an attacker can retrieve a server's private SSL key by exploiting the "Heartbleed" Vulnerability.
The NSA denied a report claiming it was aware of and even exploited the "Heartbleed" online security flaw to gather critical intelligence.
An appeals court in the United States overturned the conviction of a self-described "security research" hacker for breaking into the AT&T online network to reveal a security flaw.
Canada's government ordered all federal department websites vulnerable to the "Heartbleed" bug to be shut down.
The Heartbleed vulnerability is "catastrophic” for SSL and Internet security, Bruce Schneier, told SecurityWeek. “On the scale of 1 to 10, this is an 11,” he said. Here is what organizations need to know and what actions they should take.
Unpatched versions of Orbit Open Ad Server are vulnerable to a potentially significant SQL injection vulnerability
Intel's McAfee security division says it is focused on securing the Internet of Things as the number of devices continues to grow.
- 1 of 65
- ››
FEATURES, INSIGHTS // Vulnerabilities
A threat is the agent that takes advantage of a vulnerability. This relationship must be a key factor in the risk assessment process and can no longer be treated as risk’s neglected step child.
Here are five things I recommend security pros keep in mind when navigating the line between tight security and keeping the organization running at peak proficiency.
Whether you’re buying a smart refrigerator for your home or a printer for your company, your first step is deciding the risk involved and how to deploy the device in a secure manner while preserving the functionality you require.
Predictive security narrows the scope considerably and helps IT and security pros zero-in on the most likely vulnerabilities and areas most-at-risk due to the sensitive nature of the data they hold.
Vulnerabilities are a fact of life. Independent testing may be illegal without express permission, but that doesn’t stop code pillagers from sniffing out vulnerabilities and weaknesses in your web applications.
Without putting vulnerabilities into the context of the risk associated with them, organizations often misalign their remediation resources.
Complacency is never a good thing, but in security it can have devastating effects. While it’s good to acknowledge progress, that should never stand in the way of staying ahead of the next potential threat.
The best way to anticipate a move by an adversary is to put yourself in their position and ask, what would I do in the same situation? Studying the ways in which you would attack a given situation provides a strategic advantage when planning your defense.
In this podcast, Richard Boscovich, assistant general counsel in the Microsoft Digital Crimes Unit, talks about the new Microsoft Cybercrime Center and the ongoing battle to stop the proliferation of botnets around the world.
There’s more than functionality and availability issues ailing Healthcare.gov. There’s significant potential for compromise.
- 1 of 8
- ››
Subscribe to SecurityWeek
- GAO Report Knocks SEC for Cybersecurity Failings
- Attackers Less Reliant on Botnets to Launch Powerful DDoS Attacks: Akamai
- Satellite Telecom Vulnerable to Hackers: Researchers
- Shaping the Threat Intelligence Management Market
- Snowden Questions Putin on Surveillance in Phone-in
- Microsoft Updates Threat Modeling Tool
- Russia, Ukraine Sit Down for Crisis Talks
- Canada Police Nab Young Man in Heartbleed Data Theft
- Oracle Releases Massive Security Update
- SQL Injection Breaches Take Months to Uncover and Fix: Survey
Copyright © 2014 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use