Security news that informs and inspires

Archive

53 results for tag Vulnerability:

Predict Which Security Flaws Will be Exploited, Patch Those Bugs

How do enterprises figure out which security flaws to fix first? Research shows common vulnerability management and remediation strategies are no better than random guesses. Trying to predict which flaws will be exploited and fixing those is a better use of the security teams's time.

Vulnerability, Patch

AMD Releases Spectre Mitigations

AMD has released mitigations for the Spectre vulnerability that affects some of its processors.

Vulnerability

GitHub Alerts Help Fix Bugs in Ruby, JavaScript Code

When GitHub unveiled its Security Alerts scanning feature last November, it was betting that if project owners knew which software components they were using had vulnerabilities, they would update them with patched versions. GitHub said that by Dec. 1, 450,000 vulnerabilities had been resolved, either by removing the dependency entirely or swapping out with a more recent, patched version. That's a little over 10 percent of the vulnerabilities addressed, right off the bat.

App Security, Vulnerability, Software Security

More Than Half of Android Phones Vulnerable to Encryption Bypass Attacks

The security research team at Duo Security, Duo Labs analyzed our dataset of Android phones to find out how many were vulnerable to the latest Android encryption bypass attacks, patched in the May 2016 update.

Android, Vulnerability

That Big Symantec Antivirus Bug

A Duo Labs analysis of the recent critical vulnerability found in Symantec’s Antivirus Decomposer engine, used in Symantec Endpoint Protection and other Symantec and Norton security products, and discovered by Tavis Ormandy.

Antivirus, Vulnerability