Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State Windows 11 machines remain open to downgrade attacks, where attackers can abuse the Windows Update process to revive a patched driver signature enforcement (DSE) bypass.
'Shift Left' Gets Pushback, Triggers Security Soul Searching A government report's criticism of the 100x metric often used to justify fixing software earlier in development fuels a growing debate over pushing responsibility for secure code onto developers.
LATEST FROM DR TECHNOLOGY
Sophos-SecureWorks Deal Focuses on Building Advanced MDR, XDR Platform Sophos CEO Joe Levy says the $859 million deal to acquire SecureWorks from majority owner Dell Technologies will put the Taegis platform — with network detection and response, vulnerability detection and response, and identity threat detection and response capabilities — at the core.
China's Elite Cyber Corps Hone Skills on Virtual Battlefields The nation leads in the number of capture-the-flag tournaments sponsored by government and industry — a strategy from which Western nations could learn.