Tag: Vulnerabilities

Beyond the obvious benefit of proactively identifying application security incidents, threat modeling gives security leaders opportunities to educate developers and foster a DevSecOps culture.

IT complexity has created a "glass half empty" attitude toward information security. Even so, effective cybersecurity remains simple — just not easy.

A kernel flaw dubbed TCP SACK Panic could allow remote attackers to compromise organizations running large fleets of production Linux computers, according to a series of security advisories.

Open-source vulnerabilities are on the rise, but enterprises are struggling to effectively prioritize and remediate these threats.

In theory, dealing with BlueKeep should be no different from dealing with other vulnerabilities. Unfortunately, many organizations are lagging in their patch management efforts.

Application containers can reduce costs and streamline software development, but they also increase the attack surface, necessitating strict adherence to container security best practices.

Researchers observed an attack campaign exploiting CVE-2019-2725 and abusing certificate files to deliver a Monero miner.

Threat actors could use a recently discovered Windows 10 zero-day flaw to take over a computer and bypass local privilege escalation.

The new BlackSquid malware is capable of abusing eight notorious exploits in its attempts to install the XMRig Monero miner.

I will never watch "The Little Mermaid" again without thinking about ransomware and cyberattacks.