As the world collectively deals with COVID-19, many organizations have enacted company-wide work from home policies to help slow the spread of the virus. For many organizations the sudden requirement to support home working en masse has exposed an uncomfortable […]
Zero-day Vulnerabilities and the Visibility Gap Challenge During Mass Remote Work Read More »
One of the most common sneaky tricks on the web is typo squatting. Attackers know that someone trying to type “disney.com” can very easily type “dinsey.com” or “disnet.com” on accident, and they register those domains to redirect those mis-typed domains
Researcher Discovers Zero Day Vulnerability Using Homoglyph Characters Read More »
It’s that time of year again. Time for every one of us to reminisce on the past year and make resolutions for how we can do better in the year ahead–particularly in the area of cybersecurity. Right up to the
Cybersecurity New Year’s Resolutions from the Information Security Forum Read More »
There is a lot of information going around about a new security problems with processors (not just Intel’s, well sort of). You see there are two exploits tied to what is being termed Side-Channel Analysis. One that is relatively easy
The One Important Thing You Need to Know about Spectre and Meltdown Read More »
The simple fact is that the traditional security model is broken. The good news is that there are plenty of hungry security startups out there with innovative solutions to transform the way we secure and protect our networks and data.
Investors Pour Money Into Next-Generation Security Companies Read More »
The goal of any security awareness and training program should be to reduce risk. Unfortunately, some programs could actually end up increasing vulnerability for one fundamental reason: Adobe Flash. A breach accomplished by hacking a security training program would be
Adobe Flash exploits: How secure is your security training software? Read More »
We’ve been conditioned to believe that our malware defenses are adequate as long as we keep the software constantly updated to recognize and detect known threats. The approach is inherently reactive and functions essentially on the premise of “detect and
Cylance demonstrates why prevention is better than detection Read More »
Oracle issued a gargantuan security update that fixes 25 separate security flaws in Java, including one zero-day that has been actively exploited in the wild. Unless there is some sort of absolute business imperative that requires your use of Java
Put a fork in it, Java is done Read More »
Five years ago there was a heated battle between Steve Jobs and Adobe. Jobs refused to allow support for Adobe Flash in iOS–and wrote a 1700-word open letter explaining exactly why. Adobe Flash is still not on iOS but it
Steve Jobs was right: Adobe Flash must die Read More »
