Trending Topics
CISOs must think about their teams’ mental health after Microsoft’s record-breaking Patch Tuesday
Are you doing enough to support your security teams as patch counts continue to escalate dramatically? Davey Winder suspects not...
Trending
Patch Management
CISA issues guidance on how organisations can handle the “Patch Apocalypse”
The US Cybersecurity and Infrastructure Security Agency (CISA) has released two vital pieces of guidance for organisations facing the fallout from the so-called patch apocalypse.
Jon Dedman, Director at Cloudhouse: “If you are down, your customers and your regulator hold you responsible, regardless of whose automation caused it.”
As AI accelerates IT, human oversight can't keep up. Jon Dedman, Director at Cloudhouse explains why operational resilience now depends on continuous verification, not manual approvals
IT managers vs Mythos: Get ready for six months of update hell!
IT managers are going to be spend the next six months firefighting patches in a race against time: good AI versus bad AI
Microsoft’s record-breaking Patch Tuesday is a vulnerability itself
Big tech companies like Apple, Google and Microsoft are issuing more patches than ever, and that means organisations need to change their approach to patch management
Dr Deepak Kumar, Founder and CEO, Adaptiva: “Even with partial automation, organizations are leaving too much on the table.”
Dr. Deepak Kumar, Founder and CEO, Adaptiva, explores the vital shift from visibility to autonomous remediation in modern cybersecurity.
Splunk patches high-severity RCE in enterprise and cloud
Splunk has patched a high-severity remote code execution (RCE) vulnerability that should sit near the top of every security team’s maintenance queue.
CISA issues actively exploited ASUS, Cisco and SonicWall vulnerabilities warning
The US Cybersecurity and Infrastructure Security Agency has just published a security alert impacting Asus, Cisco and SonicWall users. Here’s what you need to do.
The IT manager’s Christmas checklist
As the world rushes into holiday season, we've put together a checklist of items that IT managers need to work through before they tuck into the latest batch of mince pies
Davey’s security lessons to learn from 2024
Security expert Davey Winder explains what security lessons we must learn from 2024 through the lens of the year's most telling stories
Windows Downdate attack exploits Windows Update to ‘unpatch’ secure devices
Thought your Windows PC was secure because it was fully updated? As Davey Winder reveals, the Windows Downdate attack means you must think again.
What caused the CrowdStrike outage — and what happens next
This "Microsoft IT outage" was caused by a security company patch, and it wreaked havoc. Here, we go behind the headlines to try and learn the lessons
Forget Patch Tuesday: it’s Take Action Thursday as Microsoft confirms Windows zero-day double-header
In light of two zero-day vulnerabilities announced by Microsoft for Patch Tuesday, today should be called Take Action Thursday says Davey Winder.
Update now! Microsoft confirms three Windows zero-day vulnerabilities
Davey Winder reveals the zero-day vulnerabilities that put your business at risk, and that you need to take action on right now.
CVSS 4.0 vulnerability rating standard fails to provide patch peace-of-mind
The new CVSS 4.0 vulnerability rating is finally here, but Davey Winder isn't convinced it will help businesses tackle the prioritisation problem.
Clop ransomware MOVEit attacks exposed email addresses of 632,000 Pentagon & DoJ employees
The Pentagon is the latest known victim of the MoveIT attack by the Clop ransomware group, explains Davey Winder. And it exposes the importance of applying patches quickly.
Happy 20th birthday Patch Tuesday, but why do we still have Exploit Wednesday?
Back on 14 October 2003, Microsoft published the first set of bundled vulnerability fixes on a set date every month: Patch Tuesday. So why are organisations still so slow to patch?
WannaCry ransomware: lessons to learn in 2023
The WannaCry attack may have taken place six years ago, but many organisations haven't learned the lessons. Davey Winder issues a timely reminder.
What are zero-day exploits?
Zero-day exploits are the bane of both IT managers and end users. So how can you best protect yourself and your business?