Endpoint/Device Security

While CISOs are often responsible for technology implementation, they are not getting the support they need at a strategic level. The Accelerator found that 73% of CISOs expressed concern over cybersecurity becoming unwieldy, requiring risk-laden tradeoffs, compared to only 58% of both CIOs and CTOs. Understanding the C-suite’s business prioritie...

Google says it will remove the package in a firmware update after reports that it has excessive privileges and contains vulnerabilities.

Merging many of your cybersecurity point solutions into a single platform offers tremendous benefits, but there may be some pitfalls to watch out for.

This week: Option ROMS are a novel way to compromise a system at the lowest level, Sinkclose opens AMD processors up to attacks, at home in your firmware exploiting SMM complete with examples, Sonos speakers get hacked and enable attackers to listen in on your conversations, DEF CON badges use new chips and are not without controversy, lasers that...

In complex software ecosystems, individual application risks are compounded. When it comes to mitigating supply chain risk, identifying backdoors or unintended vulnerabilities that can be exploited in your environment is just as critical as staying current with the latest hacking intel. Understand how to spot and reduce the risk to your environment...

A new attack method unveiled at Black Hat abuses Windows Update to roll back Windows 11 to known exploitable versions.

CyberRisk TV speaks with Menlo Security's Andrew Harding at the Black Hat 2024 conference in Las Vegas on how threat actors have moved towards exploiting browsers as other services become more secure.