Consumer Cyber Stress Requires Focus on Security
Consumers are feeling stressed out about cybersecurity, but many aren’t taking measures to better educate themselves or even check their accounts for indicators they’ve been hacked. Read more…
Execs Need Less Talk, More Action on Software Security
As the software industry struggles to recover from a supply chain security crisis, a study from Venafi indicates industry executives are saying the right things but doing very little to back up the rhetoric with decisive action to ensure vendor security. Read...
Shadow Code Remains a High Security Risk
PerimeterX released “Shadow Code: The Hidden Risk to Your Website,” the third annual survey conducted with Osterman Research on the use of Shadow Code in web applications. Read more…
Internet Users Stressed Out by Cyberattack News: Kaspersky
A new Kaspersky survey found that internet users in the US and Canada increasingly believe the internet is stressful. The findings coincided with a more general increase in internet usage due to the COVID-19 pandemic. Read more…
OMIGOD Vulnerability Exposes Virtual Machines Running Inside Azure
Late last month, researchers from cloud security firm Wiz found a new vulnerability that allows Azure users to access cloud databases of other users, breaking the principle of secure multitenancy. They dubbed it ChaosDB. Read more…
Mirai Botnet Starts Exploiting OMIGOD Security Flaw
Threat actors have started to actively exploit critical Microsoft Azure vulnerabilities, just days after Microsoft disclosed them during September’s Patch Tuesday. Read more…
Threat Modeling is a Process not a Project
Developers are starting to embrace the idea that threat modeling is a best practice as part of the secure development lifecycle (SDLC). And if it is, it can no longer be seen as a project. It must evolve into a process. A Project vs a Process Projects and processes...
Mirai Botnets Found to Exploit OMIGOD Vulnerabilities in Azure
Just a few days after the four OMIGOD vulnerabilities were discovered in Microsoft Azure, researchers on Friday reported that Mirai botnets are either scanning or actively exploiting OMIGOD. Read more…
