Security News

How to improve software vulnerability disclosure in Europe
2018-06-29 16:44

As software gets embedded in more and more things we use every day, the problem of software vulnerability reporting and patching rises in importance. Unfortunately, only a few European countries...

E-Mail Vulnerabilities and Disclosure
2018-06-04 11:33

Last week, researchers disclosed vulnerabilities in a large number of encrypted email clients: specifically, those that use OpenPGP and S/MIME, including Thunderbird and AppleMail. These are...

Tech Firms Coordinate Disclosure of New Meltdown, Spectre Flaws
2018-05-22 05:34

Intel, AMD, ARM, IBM, Microsoft and other major tech companies on Monday released updates, mitigations and advisories for two new variants of the speculative execution attack methods known as...

OCR Plans Do-Over for 'Accounting of Disclosures' Proposal
2018-05-15 14:33

Agency Will Ditch Previous HIPAA Privacy Rule Revamp Plan, Seek New IdeasFederal regulators plan to craft a new proposal for revamping a HIPAA Privacy Rule provision for "accounting of...

The pace of vulnerability disclosure shows no signs of slowing
2018-05-15 13:00

Unless the pace of vulnerability disclosure slows down in the coming quarters, we are looking at yet another record-breaking year, according to Risk Based Security’s 2018 Q1 Vulnerability...

Cyber War and the Compromise of Reliable Full Disclosure
2018-05-14 14:34

We Can’t Rely on Our Own Governments to Practice Responsible Full Disclosure. Full Disclosure is Compromised. read more

Industry CMO on the Downstream Risks of "Logo Disclosures"
2018-05-02 13:33

Cybersecurity Marketing Teams Would Benefit From an Ethics Desk read more

NIST Updates Cybersecurity Framework to Tackle Supply Chain Threats, Vulnerability Disclosure and More
2018-04-30 15:49

Version 1.1 includes updates on authentication and identity, self-assessment, supply-chain security and vulnerability disclosure, among other changes.

Cyber risk assessment and disclosure requirements: What’s important to you?
2018-04-25 12:30

In this podcast recorded at RSA Conference 2018, Jerry Caponera, VP cyber risk strategy at Nehemiah Security, offers some interesting thoughts on cyber risk assessment and disclosure requirements....

What You Need to Know About GDPR Breach Disclosure, Response
2018-04-23 20:18

Moving Organizations Toward Privacy by Design or DefaultIncident response is a critical pillar of an effective endpoint security program, one that will gain importance as GDPR enforcement comes...