Home

Responsible Exposure? On Average, Attackers Gain 47-Day Advantage when Exploits Predate Patches, According to Kenna Security

New Research Fuels the Debate on Vulnerability Disclosure and Exploit Development

New research into what happens after a new software vulnerability is discovered provides an unprecedented window into the outcomes and effectiveness of responsible vulnerability disclosure and exploit development. The analysis of 473 publicly exploited vulnerabilities challenges long-held assumptions of the security space - namely, disclosure of exploits before a patch is available does not create a sense of urgency among companies to fix the problem.

: THE EDITORIAL TEAM; Case Studies; Posted On Monday, 30 November 2020 17:10

GO SMS Pro Vulnerable to Theft of Media Files

Richard Tan, Senior Security Consultant, Trustwave Spiderlabs

The GO SMS Pro application is a popular messenger app with over 100 million downloads and was discovered to publicly expose media transferred between users of the app. This exposure includes private voice messages, videos messages, and photos. This means any sensitive media shared between users of this messenger app is at risk of being compromised by an unauthenticated attacker or curious user.

: Richard Tan, Senior Security Consultant, Trustwave Spiderlabs; Case Studies; Posted On Monday, 30 November 2020 17:05

Beyond Car Hacking: The Cyber Threat Landscape for Automotive Companies

Executive Summary

Automobile manufacturers and retailers face numerous challenges in defending their security perimeters against cyber threats. As software becomes increasingly interwoven into the fabric of car design, cyberattacks against newer cars have become increasingly common in recent years. Hackers have successfully attacked hardware and firmware components that are built into modern cars, which can facilitate theft or remote disabling of compromised vehicles. 

: THE EDITORIAL TEAM; Case Studies; Posted On Monday, 30 November 2020 16:57

Ping Identity Named One of 25 Highest Rated Public Cloud Computing Companies to Work for During the COVID Crisis

List Showcases Public Cloud Companies with the Highest Levels of Employee Satisfaction Amid the Pandemic

DENVER, CO Nov. 19, 2020 – Ping Identity was recognized as one of the 25 Highest Rated Public Cloud Computing Companies To Work For During the Covid Crisis in a list released by Battery Ventures, a global investment firm and cloud investor, with data specifically provided by Glassdoor*, the worldwide leader on insights about jobs and companies. The list highlights 25 publicly traded companies—all business-to-business, cloud-computing companies--where employees reported the highest levels of satisfaction at work during the first six months of the pandemic, according to employee feedback shared on Glassdoor.