Cider Security tackles the No. 1 problem in application security -- finding and fixing vulnerabilities in code quickly -- by increasing visibility over code development and deployment.
Read moreThe makers of operational technology and connected devices saw reported vulnerabilities grow by half in 2021, but other trends may be more disturbing.
Read moreThis sort of approach would enable cross-company and cross-sector threat information sharing, an effort that would allow companies to easily turn data into actionable insights.
Read moreTraining data stashed in GitHub by mistake... unfortunately, it was *real* data
Read moreHacking Alexa through Alexa’s Speech
March 7 2022An Alexa can respond to voice commands it issues. This can be exploited:
The attack works by using the device’s speaker to issue voice commands. As long as the...
Read more
Firefox just published a double-zero-day patch - "remote code execution" combined with "sandbox escape". Update now!
Read moreWhile attackers and researchers shift their attention to the next new vulnerability, security teams make sure they finish patching vulnerable Log4j versions in their applications and services.
Read moreWhile attackers and researchers shift their attention to the next new vulnerability, security teams make sure they finish patching vulnerable Log4j versions in their applications and services.
Read moreMore Than 70% of SOC Analysts Experiencing Burnout
March 4 2022Nearly 65% of security operations center (SOC) analysts are likely to change jobs in the next year, survey shows.
Read moreFriday Squid Blogging: Far Side Cartoon
March 4 2022Squid, of course. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here.
Read more
Recent Comments