Shellshock Anniversary: Major Security Flaw Still Going Strong
As if to celebrate its two-year anniversary, Shellshock, one of the most infamous bugs of 2014, ramped up its activity in September.
Authentication: The Enterprise’s Weakest Link
Many organizations struggle to find the right authentication methods for their employees and needs, but they can ill afford to let malpractice continue.
LinuxCon: CII Program Will Give Badges to Open Source Projects With Strong Security
Open source projects have gotten a bad rap in security circles thanks to Heartbleed and other flaws, but an industry consortium may change that.
Insecure Configuration of MongoDB, Other Databases Could Be Leaking Information
A recent report suggested poor configurations of MongoDB, Redis and similar database products may be exposing data to cybercriminals.
New OpenSSL Releases Clear Logjam, Target Minor Flaws
Multiple new OpenSSL releases finally clear the Logjam flaw and address other low-to-moderate vulnerabilities plaguing the encryption software.
Made for Headlines: Do Designer Vulnerabilities Compromise Security?
As vulnerabilities are now branded with catchy names and logos, security researchers should be careful not to compromise the responsible disclosure process
2014: The Year That the Internet Fell Apart
A session at IBM InterConnect will discuss the vulnerabilities that rocked the Internet in 2014, such as Heartbleed and Shellshock, and what may come next.
The Responsible Disclosure Policy: Safeguard or Cybercriminal Siren Song?
Having a responsible disclosure policy is the best way to communicate software vulnerabilities to the public. However, is this doing more harm than good?
Failure to Plan Is a Plan for Failure When It Comes to Security
With major security events happening in 2014, including Heartbleed and Sony's hack, what can companies do to plan ahead and protect themselves from hacks.
Security Leaders Claim Most Sites Using Drupal Have Been Hacked
A flaw in the Drupal content management system may affect many websites, but security leaders have released some steps to help mitigate the risk.