When key business assets are not adequately protected from cybersecurity breaches, organizations can experience dire consequences....

October 16, 2019•By Angela Horneman, Lauren Cooper

In Situational Awareness

The attack surface for commercial hardware now spans all stages of the development lifecycle. Even in the presence of secure, bug-free software, the growing threat of hardware Trojans and backdoors …

October 18, 2019•By Gabriel Somlo

"If it ain't broke, don't fix it." Why mess with something that already works? This is fair advice with many things in life. But when it comes to software security, …

October 23, 2019•By Will Dormann

In CERT/CC Vulnerabilities

Cyber threats are on the rise, making it vitally important to understand what's happening on our computer networks. But the massive amount of network traffic makes this job hard....

October 28, 2019•By Paul Krystosek, Timothy J. Shimeall, Nancy Ott

In Situational Awareness

In honor of Cybersecurity Awareness Month, I decided to put fingers to keys and share some basic practices that every organization should consider for their cyber hygiene initiatives....

October 30, 2019•By Matthew Trevors

In Insider Threat

A September 2018 report to the President, Assessing and Strengthening the Manufacturing and Defense Industrial Base and Supply Chain Resiliency of the United States, raised concerns about cybersecurity....

November 4, 2019•By Eliezer Kanal

In Cybersecurity Engineering

Code coverage represents the percent of certain elements of a software item that have been exercised during its testing....

November 11, 2019•By Robert V. Binder

Virtual Private Networks (VPNs) are the backbone of today's businesses providing a wide range of entities from remote employees to business partners and...

November 13, 2019•By Vijay S. Sarvepalli

In CERT/CC Vulnerabilities

Security measures are most effective when it is clear how assets are supposed to be used and by whom....

November 18, 2019•By Angela Horneman

In Situational Awareness

Over the past decade, system resilience (a.k.a., system resiliency) has been widely discussed as a critical concern, especially in terms of data centers and cloud computing....

November 25, 2019•By Donald Firesmith

In Cybersecurity Engineering