News list page

More than one in four security professionals at enterprises receive over a million security alerts every single day, which not only makes it impossible for them to analyse each of them but also to separate critical security incidents from hundreds of thousands of false positives.

As companies incorporate countless internet-connected devices in their networks, the problem is only going to get worse. Discover how quickly companies said they patch vulnerabilities in their computer systems from Outpost24 survey of 155 security professionals at the RSA Conference in San Francisco in April 2018

Security experts give their views on what final checks businesses should be doing on the eve of the General Data Protection Regulation compliance deadline, while a survey reveals almost half of Brits have not heard of it

Cross site scripting vulnerabilities are easy to exploit. The best way to prevent exploitation is by applying input and output sanitation as well as ensuring the security basics are carried out.

Outpost24 survey reveals security professionals have least confidence in the security of the cloud infrastructure and most confidence in their owned infrastructure and data centres.

A widely-publicised Drupal flaw dubbed "Drupalgeddon2" has been exploited to cryptojack more than 340 government, corporate, and university websites.

In response to the news that Airbnb customers are being targeted with GDPR-related phishing scams, IT security experts at ESET and Outpost24 commented below

An AutoFill plugin offered to LinkedIn members was affected by a bug that could have allowed an attacker to steal users’ personal data without them knowing. LinkedIn has long offered an AutoFill button plugin for paying marketing solutions customers, who can add the button to their websites to let LinkedIn users fill in profile data with a single click. Unfortunately, little did uses know that they were exposing sensitive information like email addresses, telephone numbers and job details.

TaskRabbit, a web-based service that connects freelance handymen with clients in various local US markets, has emailed customers admitting it suffered a security breach. The company has taken down its app and website while law enforcement and a private cyber-security firm are investigating the incident. IT security experts commented below.

"Bug bounty programmes offer a way for organisations to 'outsource' application security testing, but it comes at a cost"