The document extensively reviews best practices in security assessments for organizations. The National Institute of Standards and Technology issued its newest and final copy of guidance...
US healthcare company EyeMed has reached a $600,000 settlement following a data breach that compromised the records of 1.2 million people. EyeMed is a vision network benefits provider...
CIOs discuss how agency leadership and change management facilitate Biden’s cybersecurity executive order implementation. Additional cybersecurity requirements stretching across all public organizations are a welcome addition...
Rep. John Katko is continuing a campaign to make the Cybersecurity and Infrastructure Security Agency a central Chief Information Security Office—or CISO— for federal civilian agencies....
A trio of vulnerabilities in enterprise print management software PrinterLogic offer attackers a route to remote code execution (RCE) on all connected endpoints, security researchers have revealed. All...
A misconfigured databased managed by a California public office has potentially exposed the sensitive medical information of citizens. County of Kings, in mid-California, announced that the...
ANALYSIS Numerous issues were discovered with User-Agent parsing libraries as the major version number of web browsers went from one digit to two digits a decade ago. Now that we are...
The Russian Federal Security Service (FSB) and law enforcement have arrested Andrey Sergeevich Novak, the alleged leader of the Infraud Organization, a hacker group that caused...
Users were left startled as Google Drive’s automated detection systems flagged a nearly empty file for copyright infringement. The file, according to one Drive user, contained nothing other...
A security researcher has chained a pair of vulnerabilities in popular web hosting platform CentOS Web Panel (CWP) to achieve pre-authenticated remote command execution (RCE) as...
Recent Comments