If you’re in IT, chances are you’ve probably heard the terms zero trust, zero-trust network access (ZTNA), and SASE (aka “Sassy”) mentioned recently. For those who haven’t, no doubt you soon will. The question many are asking is whether these terms are merely buzzwords or do they solve real problems? The Way Things Were For the…
Vulnerability management is the practice of identifying, classifying, prioritizing, remediating, and mitigating software vulnerabilities. Vulnerability management is integral to information security and information systems — and despite the similarity in terms, it is not the same as vulnerability scanning. Vulnerability scanning consists of using a computer program to identify vulnerabilities in networks, computer infrastructure or applications. Scanning is an important component of vulnerability management, but it is…
Introduction There’s lots of language challenges when talking about alerts, vulnerabilities and incidents. It’s a common error to speak about vulnerabilities when you are really referring to “vulnerability alerts”. Furthermore, a common confusion comes from talking about “incidents” when a vulnerability is found in a system. A vulnerability can cause an incident when exploited –…
