In partnership with security analyst Rich Mogull (right), Microsoft is set to roll out a new research project to help businesses compute the total cost of the patch-management cycle, from testing and ...

When it comes to security, fixing problems before they are exploited is easier and cheaper than doing incident response. It's clear that fast patching stops attackers from getting in, and using best ...

When cybersecurity succeeds, there aren’t any negative outcomes. But when there’s no fallout, it's harder to make the case for the resources needed to prevent bad outcomes in the future. “No news is ...

Everyone wants the same outcome: protect their organization. So why do security and IT teams keep working against each other? The answer sits in patch management, where good intentions collide with ...

For security teams, managing vulnerabilities is a necessary task. Everyone in IT knows how critical patches are to prevent breaches, and we have days every month devoted to the latest slew of updates ...

Research from the University of Maryland proposes new security metrics that can help enterprises understand risks to their products and prioritize patching and vulnerability management. Adequate ...

Information security specialists like to argue over a lengthy list of possible metrics to measure their systems' security posture. For managers and executives, however, the picture needs to be ...

Lance Spitzner wonders why we invest so much each year in security technologies but still fail to patch the most vulnerable element of all - the Human OS Computers and mobile devices store, process ...