In September 2018, a new high-visibility remote code execution (RCE) flaw in the Apache Struts 2 framework was released. Apache Struts 2 is an open-source web application framework used by many developers and vendors when creating Java EE web applications. This is a critical flaw and should be patched by upgrading to at least v.2.3.35…
On Jan. 14, 2020, mainstream support for Windows Server 2008 and Windows Server 2008 R2 will be ended. If you do nothing, your servers will no longer receive regular security updates from Microsoft after this date. Why is this of concern? Most companies must comply with many different regulatory requirements. Regulatory agencies often have mandates…
Our nation’s financial system is fragile. The technology we depend on today for the secure exchange of funds between banks dates back decades to a system that was first built to facilitate funds transfers using Morse Code. Today’s incarnation of that system takes advantage of modern computing standards, such as TCP/IP networking, but that convenience…
When working with clients, I see a variety of environments and an even wider variety of configurations. In today’s world, adopting the whole stack is not just a good idea, I’d say it’s a requirement. What do I mean by the whole stack? Many developers accept a few roles when it comes to their application:…
Last week, I had the pleasure of joining almost 200 security leaders from around the world for CDW’s Managing Risk SummIT. One thing was clear from the many great conversations we shared: The world has changed. The security practices that helped us keep intruders out for the past two decades will not hold up against…
— by Brandon Jackson, Jennifer Lugo, Jason Owens and Jesse Wiener There has been a lot of information and articles published over the last few days regarding what some initially reported as a security issue with Intel CPUs. As more research and information has become available, some of the details previously announced appear to have…
