Patch/Configuration Management

The growth of application development, DevOps, containers, and cloud has fueled the growth of application security tools.  We now have static analysis, software composition analysis, interactive analysis, dynamic analysis, container scanning, infrastructure as code scanning, and a number of runtime application security products.  That’s a lot of testing data, but how do we integrate it […]

The terms machine learning (ML) and artificial intelligence (AI) are way overused terms in our industry.  Every vendor seems to have the latest and greatest ML/AI solution to solve your security problem.  But when you really dig into the math, there are mathematical models that can actually help us.  So why don’t we focus on […]

There are a lot of endpoint security solutions on the market.  How do you pick and choose which solution is right for you?  The answer may depend on which endpoints you want to protect. Windows? MacOS? Linux? All of the above?  What about containers and cloud infrastructure? When we think of traditional endpoints, we immediately […]

While a well-informed security professional might look at a bug entry in Microsoft's revised approach and quickly understand how the standard-based table translates to overall risk assessment, not everyone in an organization is equipped to do so.

Said one security expert, many organizations are likely to encounter VPN failures or downtime from legacy on-premises patch management tools buckling under the pressure.

Cloud-Native and Serverless are the next evolution of application architecture.  But protecting these applications is not easy.  Where do I install my agent?  How do I monitor network traffic?  What APIs are exposed? The adoption of containers started this challenge a few years ago by abstracting the application from the operating system.  In order to […]

The endpoint market has been hot for years.  At one point, there were over 80 new endpoint vendors trying to displace the traditional anti-virus vendors.  The endpoint security market was transitioning from endpoint protection to endpoint detection and response (EDR).  EDR is all the rage, but do you really need one? While the endpoint market […]

In an uncommon move, WordPress developers earlier this month automatically pushed an important security update for the popular Loginizer plug-in to roughly 1 million people, which caught some unsuspecting users off-guard in the process.