Attack surface management

AWS said it removed “unapproved code” affecting the extension and released an updated version.

Administrators are taking their time with installing patches, even for known vulnerabilities.

The fileless attack forcibly redirects visitors to a spam site using a hidden script.

Criminal activity could account for $15.6 trillion dollars of economic activity by the year 2029.

The following article summarizes a recent SC webcast discussion between Host Jackie McGuire and Daniel Daraban, Senior Director of Product Management at Bitdefender. They discussed a blueprint for building a security posture that aligns to the specific risk profile of individual organizations.

If your visibility ends where their reconnaissance begins, you're exposed in ways you may not realize until it’s too late.

SecurityWeek reports that global open standards consortium OASIS had its OpenEoX Technical Committee, composed of Microsoft, Cisco, Oracle, IBM, Dell, and RedHat, issue a draft framework pursuing the standardization of end-of-life security notices for software and hardware offerings amid mounting security risks stemming from outdated systems.