Risk Management June 7, 2023

Secure-by-design: Which comes first, code or security?

4 min read - For years, developers and IT security teams have been at loggerheads. While developers feel security slows progress, security teams assert that developers sacrifice security priorities in their quest to accelerate production. This disconnect results in flawed software that is vulnerable…

News August 31, 2022

40% of zero day exploits from the last decade happened in 2021

2 min read - Zero-day vulnerabilities are increasing. Attackers can exploit these weaknesses in the wild before a patch becomes publicly available. Until white hats mitigate a zero-day vulnerability, actors can freely exploit it to breach data, systems and networks. According to a Mandiant…

Software Vulnerabilities August 19, 2020

New Vulnerability Could Put IoT Devices at Risk

7 min read - Society relies so heavily on technology that the number of internet connected devices used globally is predicted to grow to 55.9 billion by 2025. Many of these devices span parts of Industrial Control Systems (ICS) that impact the physical world,…

X-Force June 25, 2020

Vulnerable Powerline Extenders Underline Lax IoT Security

9 min read - Multiple vulnerabilities have been found in Tenda PA6 Wi-Fi Powerline extender, version 1.0.1.21. This device is part of Tenda’s PH5 Powerline Extender Kit and extends the wireless network through home’s existing electrical circuitry. The kit, which was examined in collaboration…

March 28, 2018

System Shock: Energy Sector Tops ICS Security Vulnerabilities List

2 min read - Industrial control system (ICS) security vulnerabilities are becoming high-priority targets for cybercriminals and, according to recent data, the energy industry tops the list.

Software Vulnerabilities June 23, 2014

Android KeyStore Stack Buffer Overflow: To Keep Things Simple, Buffers Are Always Larger Than Needed

3 min read - Nine months ago, IBM discovered a classic stack-based buffer overflow in the Android KeyStore service; the vulnerability was recently disclosed publicly.