Dark Reading Daily -- March 18, 2023

Follow Dark Reading:

March 18, 2023

LATEST SECURITY NEWS & COMMENTARY

How Patch Tuesday Keeps the Beat After 20 Years

Patch Tuesday turned security updates from chaotic events into a routine. Here's how we got here and where things might be heading.

Technology Firms Delivering Much-Sought Encryption-in-Use

If the approaches stand up to scrutiny, companies may soon be able to encrypt most databases in a way that allows using data without needing to decrypt to plaintext.

Google Proposes Reducing TLS Cert Life Span to 90 Days

Organizations will likely have until the end of 2024 to gain visibility and control over their keys and certificates.

Orgs Have a Long Way to Go in Securing Remote Workforce

Organizations recognize that they are responsible for protecting remote workers from cyber threats, but they have a long way to go in deploying the necessary security technologies.

How Do Attackers Hijack Old Domains and Subdomains?

Here is a cautionary tale of what happens if you don't remove obsolete side projects or sections of your website: Someone might hijack your subdomain.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Proposed FCC Rule Redefines Data Breaches for Communications Carriers If the proposed rule is approved, organizations would need to disclose all data breaches, even ones that don't cause any harm, to affected customers. 'Skinny' Cyber-Insurance Policies Create Compliance Path It's getting hard to buy cyber insurance, but not having it is not always an option. Low-coverage plans could bridge the gap. Machine Learning Improves Prediction of Exploited Vulnerabilities The third iteration of the Exploit Prediction Scoring System (EPSS) performs 82% better than previous versions, giving companies a better tool for evaluating vulnerabilities and prioritizing patching. MORE

EDITORS' CHOICE

Name That Edge Toon: Domino Effect

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

FROM THE NEWS DESK

SVB Meltdown: What It Means for Cybersecurity Startups' Access to Capital

The implosion of Silicon Valley Bank will impact investors, startups, and enterprise customers as they become more cautious over the near term, security experts say.

WEBINARS

Managing Identity in the Cloud
Shifting identity management and provisioning to the cloud helps streamline these operations. It also brings a new set of challenges, including integrating and managing user identities, privileges, and other attributes used in various on-premise and cloud systems, especially if your ...
Ten Emerging Vulnerabilities Every Enterprise Should Know
Every day, black hat attackers and white hat researchers are discovering new security vulnerabilities in widely-used systems and applications that might be exploited to compromise your data. Are you aware of the newest - and potentially most impactful - vulnerabilities ...

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
The enterprise attack surface is constantly expanding. Enterprises have to think beyond zero day vulnerabilities. It's imperative security teams start looking at vulnerabilities in 5G, firmware, edge, and ICS/OT, among others. Managing system vulnerabilities is one of the old ...
Shoring Up the Software Supply Chain Across Enterprise Applications
Supply chain security attacks are growing at an alarming pace, and things are going to keep getting worse until DevSecOps teams get on the same page. A little help from the feds could also be welcome Modern-day software development depends ...
10 Hot Talks From Black Hat USA 2022
Black Hat USA brings together cutting-edge research, new security tools, and sophisticated defensive techniques over the course of two days. There were some recurring themes across the sessions, and many of these topics are going to be important issues to ...

View More Dark Reading Reports >>

PRODUCTS & RELEASES

Rapid7 Acquires Minerva Labs to Extend Leading Managed Detection and Response Service

Prancer Announces Integration With ChatGPT for Enhanced Security Assessments

Hornetsecurity Launches VM Backup V9

DirectDefense Reports the Top Threats From 2022 and What's Trending for 2023

SecurityScorecard Appoints Former US Congressman John Katko As Senior Advisor

MORE PRODUCTS & RELEASES

CURRENT ISSUE

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
DOWNLOAD THIS ISSUE
VIEW BACK ISSUES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech Holdings LLC | Registered in the United States
with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today