Vulnerability Management

The industry needs to adopt a collaborative approach to undercover single points of failure before our adversaries exploit them.

Organizations using D-Link network attached storage (NAS) hardware should check their devices following the disclosure of a critical security vulnerability

CISA urges security teams to run the patch right away and don’t let devices running Palo Alto Expedition software on the public internet.

Robo-Turing, BlueNoroff, Palo Alto, German Law, Fabric, Cisco, Banning Things, Aaran Leyland, and More, on this edition of the Security Weekly News.

A proposed amendment would exclude legitimate security research from the definition of data espionage.

CISOs struggle more with reactive budgets than CIOs or CTOs. It's not that part of the CISO's budget shouldn't be reactive, it's certainly necessary to an extent. The problem is when proactive measures suffer as a result. In this interview, we'll discuss some of the causes behind this and some strategies for breaking out of this loop. This segment...

Also known as RISK:STATION, the zero-click vulnerability could be leveraged to compromise millions of devices, according to Midnight Blue researchers, who discovered and reported the issue at Pwn2Own Ireland.

Impacted by the flaw, which stems from improper input validation to the web-based management interface, are Catalyst IW9165E Rugged Access Points and Wireless Clients, Catalyst IW9165D Heavy Duty Access Points, and Catalyst IW9167E Heavy Duty Access Points with activated URWB, noted Cisco.