Security news aggregator

Latest coverage for Disclosure

Stay informed on the latest in security disclosure practices. Keep your data safe with insights and updates on the newest disclosure trends in cybersecurity.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Disclosure in information security means sharing details about vulnerabilities, breaches, or security incidents. This can be done privately with affected parties, coordinated to allow fixes before public release, or fully public, sometimes before patches exist. The method chosen affects how quickly risks are mitigated and how much attackers might exploit the information.

Proper disclosure helps organizations prioritize patching and reduces the window attackers have to exploit flaws. Poorly timed or incomplete disclosure can expose systems to increased risk, while transparent, coordinated disclosure supports effective vulnerability management and trust between researchers and defenders. Understanding disclosure practices is essential for assessing the urgency and reliability of security news.

Showing 3 most recent headlines Filtered view
Bank Info Security 2 years, 5 months ago

Okta Lays Off 400 Employees in Second Round of Dismissals

The Identity Provider Experienced a String of Embarrassing Cybersecurity IncidentsOkta announced layoffs amounting to 7% of its workforce in a restructuring that will cost 400 employees their jobs. Thursday's disclosure is the second round of layoffs the company has undergone in the past 12 months. CEO Todd McKinnon said the cuts are needed to run Okta with "greater efficiency."

Bank Info Security 2 Feb 2024, 9:00 a.m. Disclosure Okta
Bank Info Security 2 years, 5 months ago

Ivanti Discloses Additional Zero-Day That Is Being Exploited

Company Starts Patch Rollout for Flaws Exploited by Likely Chinese Intelligence OpCorporate VPN maker Ivanti on Wednesday began a belated patch rollout for zero-day flaws that many cybersecurity firms say paved the way for an espionage hacking operation likely conducted by China. Ivanti also disclosed two more zero-days and told customers that hackers are exploiting one of them.

Bank Info Security 1 Feb 2024, 11:30 a.m. 0-Day China Disclosure Flaw Hacking Patch VPN
Bank Info Security 2 years, 5 months ago

SolarWinds Requests Court Dismiss Regulator's Fraud Case

Calls Securities and Exchange Commission's Cybersecurity Allegations 'Unfounded'Network monitoring software vendor SolarWinds moved to dismiss a federal lawsuit accusing the company and its CISO of securities fraud after they allegedly misstated the efficacy of its cybersecurity controls. Russian intelligence hacked the company in an incident disclosed in 2020.

Bank Info Security 30 Jan 2024, 6:30 a.m. CISO Disclosure Fraud Incident Lawsuit Russia SolarWinds Vendor