When automation is balanced between humans and machines, we can ensure teams always have the best tool for the job
CISA’s ‘Must Patch’ List Puts Spotlight on Vulnerability Management Processes
The U.S. Cybersecurity and Infrastructure Security Agency’s catalog of known exploited vulnerabilities can be useful not only for helping organizations patch high-risk vulnerabilities in their systems, but also to help them build or improve vulnerability management processes.
White House Publishes Federal Zero Trust Strategy
UK’s NCSC Pushes NMAP Scanner Scripts to Fill Defender Gap
The U.K. government’s cybersecurity agency has announced plans to ship a collection of well-tested, reliable scanning scripts to help defenders find and fix high-priority software security vulnerabilities.
PrinterLogic Patches Code Execution Flaws in Printer Management Suite
PrinterLogic has released security updates to address a total of nine vulnerabilities in Web Stack and Virtual Appliance, including three security defects that carry “high severity” ratings.
Delay in Creating New Cybersecurity Board Prompts Concern
This is not the first time lawmakers have been unhappy with the pace of progress under Biden
Port of Los Angeles Launches Cyber Resilience Center
Court Awards Merck $1.4B Insurance Claim Over NotPetya Cyberattack

New Jersey court delivers summary judgment against insurance company’s refusal to pay based on war exclusion clause
CISA Releases Final IPv6 Security Guidance for Federal Agencies
The U.S. government’s Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released the final version of its IPv6 security guidance for federal agencies.
Prolific Chinese APT Caught Using ‘MoonBounce’ UEFI Firmware Implant
Threat hunters at Kaspersky have spotted a well-known Chinese APT actor using an UEFI implant to maintain stealthy persistence across reboots, disk formatting or disk replacements.













