How Routine Pen Testing Can Reveal the Unseen Flaws in Your Cybersecurity Posture
Testing is an ongoing mission, not a one-and-done fix.
Nasty SQL Injection Bug in Zendesk Endangers Sensitive Customer Data
The API-related vulnerabilities put conversations, email addresses, tickets, and more in danger of exposure via the Zendesk Explore reporting service.
Researchers Sound Alarm on Dangerous BatLoader Malware Dropper
BatLoader has spread rapidly to roost in systems globally, tailoring payloads to its victims.
Quantum Cryptography Apocalypse A Timeline and Action Plan
Quantum computings a clear threat to encryption, and post-quantum crypto means adding new cryptography to hardware and software without being disruptive.
Bugcrowd Names David Gerry Chief Executive Officer
AppSec and Cybersecurity veteran will leverage his strong institutional experience as demand for crowdsourced cybersecurity solutions grows.
Research Finds Less Than a Quarter of Organizations Fully Confident ExEmployees No Longer Have Access to Company Infrastructure
Teleport releases its second annual State of Infrastructure Access and Security report.
Cookies for MFA Bypass Gain Traction Among Cyberattackers
Multifactor authentication has gained adoption among organizations as a way of improving security over passwords alone, but increasing theft of browser cookies undermines that security.
Knock Knock Aiphone Bug Allows Cyberattackers to Literally Open Physical Doors
The bug affects several Aiphone GT models using NFC technology and allows malicious actors to potentially gain access to sensitive facilities.
Why CVE Management as a Primary Strategy Doesnt Work
With only about 15% of vulnerabilities actually exploitable, patching every vulnerability is not an effective use of time.
Twitters CISO Takes Off Leaving Security an Open Question
Lea Kissner was one of three senior executives to quit this week, leaving many to wonder if the social media giant is ripe for a breach and FTC action.