Upgrades for Spring Framework Have Stalled
April 16 2022Upgrading and fixing the vulnerability in the Spring Framework doesn't seem to have the same level of urgency or energy as patching the Log4j library did back in December
Read moreUpgrading and fixing the vulnerability in the Spring Framework doesn't seem to have the same level of urgency or energy as patching the Log4j library did back in December
Read moreThe third emergency Chrome 0-day in three months - the first one was exploited by North Korea, so you might as well get this one ASAP.
Read moreGoogle patches a critical flaw in its Chrome browser, bringing its count of zero-day vulnerabilities fixed in 2022 to four.
Read moreBeautiful video shot off the California coast. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...
Read moreIT professionals worry most about cloud security, but other questions arise about training, functionality, and performance.
Read moreIT professionals worry most about cloud security, but other questions arise about training, functionality, and performance.
Read moreChemical companies are the latest to be targeted by the well-known North Korean group, which has targeted financial firms, security researchers, and technology companies in the past.
Read moreOmdia Senior Analyst Hollie Hennessy says the new threat to multiple ICS and SCADA devices underscores the importance of a rapid response to IoT and OT security risks.
Read moreOmdia Senior Analyst Hollie Hennessy says the new threat to multiple ICS and SCADA devices underscores the importance of a rapid response to IoT and OT security risks.
Read moreThe act contains a loophole added late in the process that will impede progress toward the goal of increasing US cybersecurity: a complete carve-out of DNS from the reporting...
Read more
Recent Comments