The Worst Data Security Breaches Till 2015
Mar 2, 2016By Rini
Detailed content is not available for this entry yet.
Featured Posts
Open The Most Effective Vulnerability Assessment Framework What Makes One Effective
Point of View
The Most Effective Vulnerability Assessment Framework What Makes One Effective
No single named standard makes a vulnerability assessment framework effective. This piece covers NIST, ISO, and CIS Controls, then breaks down what actually separates a working framework from a checklist, coverage, risk based prioritization, cadence, ownership, and a feedback loop.
Open Threat and Vulnerability Assessment How Risk Actually Gets Calculated
Point of View
Threat and Vulnerability Assessment How Risk Actually Gets Calculated
A vulnerability alone doesn't tell the whole risk story. This piece breaks down how a threat and vulnerability assessment pairs technical weaknesses with real attacker context, walks through the six step process, and covers frameworks like NIST 800-30 and ISO 27005.
Open Vulnerability Assessment Services: What to Look For
Point of View
Vulnerability Assessment Services: What to Look For
Choosing a vulnerability assessment provider means asking about actual coverage, scan frequency, and whether findings come with real prioritization or just a CVSS dump. This piece breaks down what strong vulnerability assessment services include, red flags to avoid, and questions to ask before signing.
Open Agentic AI Vulnerability Assessment What Changes and What Does Not
Point of View
Agentic AI Vulnerability Assessment What Changes and What Does Not
Agentic AI is expanding what a vulnerability assessment needs to cover, autonomous agents bring their own credentials, tool access, and memory, adding a genuinely new asset class alongside servers and endpoints. It's also compressing attacker timelines and introducing risk categories like goal hijacking and tool misuse that don't map to a traditional CVE. But the core discipline hasn't changed: the same lifecycle of scoping, scanning, prioritizing, and remediating still applies, human judgment still drives prioritization, and accountability still sits with the people who deployed the agent, not the agent itself.