Don’t Just Put Out the Zero-Day Fire — Get Rid of the Fuel
The best way to remediate zero-day threats is to focus on proactively assessing and patching the vulnerabilities that facilitate them.
Five Key Differences Between Personal and Enterprise Endpoint Security
CISOs must understand the key difference between individual and enterprise endpoint security to adequately protect corporate data.
Basic Security Tools You Cannot Afford to Miss in Your Risk Management Program
Security professionals can leverage freely available, open source security tools to protect their environments from threats.
The Myth of Mutual Exclusivity: Making the DevOps Process More Agile Without Compromising Security
Does agility make the DevOps process less secure? A new survey suggested that, contrary to popular belief, security and agility aren't mutually exclusive.
Don’t Sweep Web Application Penetration Testing Under the Rug
Although it is one of the most crucial components of any security strategy, web application penetration testing is often neglected.
The Telltale Text File: Security Researcher Proposes Standardization for Reporting Vulnerabilities
Security researcher Ed Foudil proposed adding a security.txt to every website to standardize the process of reporting vulnerabilities.
Downward Trend in Publicly Available Exploit Code? Don’t Ease Up on Patch Management Just Yet
IBM X-Force reported a downward trend in publicly available exploit code, but security teams must still prioritize vulnerability and patch management.
Little-Known PDF Flaw Creates Crashing Concerns
A little-known PDF flaw in a parsing library that was originally discovered six years ago is also present in many contemporary and popular file viewers.
Three Practical Tips That Empower Developers and Prevent Open Source Security Risks From Entering Your Code
There are many benefits to developing software using open source code, but these components can also introduce vulnerabilities into your code.
PostgreSQL Database Management System Patches Password Flaws
PostgreSQL developers announced a round of patches to address more than 50 bugs and three vulnerabilities in the popular database management system.