WebCast
Zero day and counting
This webcast will take a look at the how companies are still fighting the battle of zero days disclosed months or even years ago, the fallacy of the patch, and why continued detection is important.
About SC Media
Your search for heartbleed/ returned 125 results
Cybercrime
Monero-mining Drupal malware targets network systems
Cybercriminals are delivering Monero-mining malware designed to turn entire systems into mining bots via a Drupal vulnerability that was patched back in April of this year.
Executive Insight
Open source in your data center – what you should know
Open-source software started out as a grassroots movement and morphed in a short time into a mega-industry. Today, open-source code boosts modern business application delivery – allowing development and operation teams to be more agile, enjoy solutions that are custom-fit to their needs, and lower development and rollout costs. There’s no question that open-source solutions…
Executive Insight
Cryptography is our digital immune system
A fifth, man-made domain serving as a great force multiplier for commerce and free expression, cyberspace has also made us more vulnerable. We have intertwined nearly every aspect of society including critical infrastructure, business, and communication to internet technology, all of which was not initially designed to be secure in this hyper-connected world. No organism,…
Vulnerabilities
Oracle issues emergency patch for JoltandBleed bug in Tuxedo middleware
Oracle Corporation issued an emergency patch on Tuesday, fixing critical vulnerabilities affecting the Jolt server within Oracle Tuxedo that could be exploited over a network with no valid username or password credentials.
InfoSec Insider
SSL/TLS Assurance
TLS is the cornerstone of secure communications for networked communications, but are you implementing and maintaining it correctly?
InfoSec Insider
News in a Minute Weekly Roundup | Sept. 22
A roundup of the top news stories in information security this week, including a new Apache vulnerability that's similar to Heartbleed, and a new study sheds light on the costs of data breaches for U.S. enterprises.
Data Breach
Data.gov.uk leak prompts password changes
A GDS spokeswoman claimed that other government websites had not been affected in the breach, which exposed usernames, email addresses and hashed passwords.
Ransomware
After the WannaCry ransomware campaign, why aren’t people patching?
A massive ransomware campaign attacked countless endpoints for the second time in just over a month, exploiting a vulnerability that had been patched months earlier. SC asks, why does this keep happening?
Vulnerabilities
Yahoo banishes ImageMagick after version it was using was found vulnerable to data exfiltration
Yahoo has reportedly shelved its use of ImageMagick image processing software after a researcher discovered two vulnerabilities that could be exploited to pull user content in unauthorized fashion from the memory of Yahoo’s private servers. Security researcher Chris Evans, who discovered the vulnerabilities, dubbed them Yahoobleed #1 and Yahoobleed #2, because they evoked memories of…
Next post in Vulnerabilities
