Researcher Uncovers Shipping Industry Security Flaws
Using a simple online search engine, a researcher exposed several shipping industry security gaps that could leave container ships vulnerable to threats.
Don’t Just Put Out the Zero-Day Fire — Get Rid of the Fuel
The best way to remediate zero-day threats is to focus on proactively assessing and patching the vulnerabilities that facilitate them.
Malware Mines Monero on Vulnerable Servers
Security researchers reported that threat actors have been targeting vulnerable servers to mine for cryptocurrency since about May 2017.
Thermal Security Camera Flaws Could Let Cybercriminals Launch Remote Attacks
Cybercriminals could launch remote attacks through thermal security camera vulnerabilities. The flaw, first found in FLIR, could also expose other systems.
Worried About Apache Struts? Stay One Step Ahead of Endpoint Attacks
Security teams needs advanced visibility into all endpoints across the organization to prevent endpoint attacks such as the recent Apache Struts exploit.
The Myth of Mutual Exclusivity: Making the DevOps Process More Agile Without Compromising Security
Does agility make the DevOps process less secure? A new survey suggested that, contrary to popular belief, security and agility aren't mutually exclusive.
Don’t Sweep Web Application Penetration Testing Under the Rug
Although it is one of the most crucial components of any security strategy, web application penetration testing is often neglected.
The Telltale Text File: Security Researcher Proposes Standardization for Reporting Vulnerabilities
Security researcher Ed Foudil proposed adding a security.txt to every website to standardize the process of reporting vulnerabilities.
Downward Trend in Publicly Available Exploit Code? Don’t Ease Up on Patch Management Just Yet
IBM X-Force reported a downward trend in publicly available exploit code, but security teams must still prioritize vulnerability and patch management.
Disclosure of 10 D-Link Zero-Day Flaws Raises Huge Router Security Concerns
Router security fears have prompted a researcher to recommend that members of the general should disconnect their D-Link 850L routers from the internet.