Security News

Critical Security Controls Draft Available for Public Comment (July 1, 2015) (SANS Newsbites)
2015-07-07 21:12

Critical DoS Bug in Node.js, io.js Patched (Threatpost)
2015-07-07 17:34

Developers at Node.js over the weekend released a critical update to the runtime environment that addresses a bug that could be used to cause denial of service attacks.

A Framework for Assessing 20 Critical Controls Using ISO 15504 and COBIT 5 Process Assessment Model (PAM) (SANS Reading Room)
2015-07-06 23:22

Critical RubyGems vulns can lead to installation of malicious apps (Help Net Security)
2015-06-23 10:55

A serious vulnerability in RubyGems, a package manager for the Ruby programming language, can be exploited to trick end users into installing malware from attacker-controlled gem servers, Trustwave re...

Case Study: Critical Controls that Sony Should Have Implemented (SANS Reading Room)
2015-06-23 04:26

Researchers Uncover Critical RubyGems Vulnerabilities (SecurityWeek)
2015-06-23 04:26

Drupal Fixes Critical OpenID Bug (Threatpost)
2015-06-18 13:22

Drupal has patched several vulnerabilities in versions 6 and 7 of the content-management system, including a critical bug that enables an attacker to hijack administrators’ accounts and take...

5 Ways to Protect Business-Critical ERP Functions (IT Toolbox Blogs)
2015-06-16 23:11

VMware Fixes Critical Security Issues in Workstation, Fusion, Horizon View (SecurityWeek)
2015-06-10 13:11

Microsoft releases critical patches, improves IE security (Help Net Security)
2015-06-10 10:16

This June Patch Tuesday we have a slightly smaller patch load from Microsoft, taking us back to more historic average releases of eight bulletins. We have just two critical patches to deal with and si...