Patch Madness: Vendor Bug Advisories Are Broken, So Broken Dustin Childs and Brian Gorenc of ZDI take the opportunity at Black Hat USA to break down the many vulnerability disclosure issues making patch prioritization a nightmare scenario for many orgs.
Don't Take the Cyber Safety Review Board's Log4j Report at Face Value Given the lack of reporting requirements, the findings are more like assumptions. Here's what organizations can do to minimize exposure.
LATEST FROM DR TECHNOLOGY
Transitioning From VPNs to Zero-Trust Access Requires Shoring Up Third-Party Risk Management ZTNA brings only marginal benefits unless you ensure that the third parties you authorize are not already compromised.
DEF CON 30: Hackers Come Home to Vibrant Community 
