Hacker Fails for the Win
Security researchers share their biggest initial screwups in some of their key vulnerability discoveries.
Rackspace Incident Highlights How Disruptive Attacks on Cloud Providers Can Be
A ransomware attack on the companys Hosted Exchange environment disrupted email for thousands of mostly small and midsize businesses.
Android Serves Up a Slew of Security Updates 4 Critical
Out of more than 80 flaws fixed this month, the most critical was a system component bug that could allow RCE over Bluetooth.
Cybersecurity Resilience Emerges as Top Priority as 62 of Companies Say Security Incidents Impacted Business Operations
Ciscos annual Security Outcomes Report shows executive support for a security culture is growing. It identifies the top seven success factors that boost enterprise security resilience, with a focus on cultural, environmental, and solution-based factors that businesses leverage to achieve security.
Will New CISA Guidelines Help Bolster Cyber Defenses
Learn how BOD 23-01 asset inventory mandates can help all organizations tighten cybersecurity.
Zerobot Weaponizes Numerous Flaws in Slew of IoT Devices
The botnet exploits flaws in various routers, firewalls, network-attached storage, webcams, and other products and allows attackers to take over affected systems.
For Cyberattackers Popular EDR Tools Can Turn into Destructive Data Wipers
Microsoft, three others release patches to fix a vulnerability in their respective products that enables such manipulation. Potentially other EDR products affected as well.
Shift to MemorySafe Languages Gains Momentum
Software firms and the National Security Agency urge developers to move to memory-safe programming languages to eliminate a major source of high-severity flaws.
Google Chrome Flaw Added to CISA Patch List
CISA gives agencies deadline to patch against Google Chrome bug being actively exploited in the wild.
What Will It Take to Secure Critical Infrastructure
Theres no quick fix after decades of underinvestment, but the process has started. Cybersecurity grants, mandatory reporting protocols, and beefed-up authentication requirements are being put in place.