Security news aggregator

Latest coverage for Exposure

Stay informed on the latest exposure risks in information security. Expert analysis, breach updates, and data leak prevention tips. Stay secure!

8 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Exposure is the condition in which a system, service, credential, vulnerability, or sensitive information is accessible or discoverable by people or systems that should not reach it. In threat modeling, it describes an attack surface or loss of control—not proof that an attacker has succeeded. Examples include an internet-facing administration interface, cloud storage with unintended permissions, a secret committed to source code, or personal data sent to an unintended recipient. Its significance depends on what is exposed, who can reach it, and which protections remain.

The primary defense is exposure reduction: maintain an accurate asset inventory, remove unnecessary public access, enforce least-privilege permissions and strong authentication, patch externally reachable software, and revoke leaked credentials or secrets. Encryption can limit the value of exposed data, but does not correct an exposed access path. Continuous scanning and log review help identify changes and support rapid containment when exposure is discovered.

Showing 8 most recent headlines Filtered view
Bank Info Security 2 years, 2 months ago

Nagomi Exits Stealth With $30M to Help Manage Security Risks

Cyber Startup Wants to Enhance Customers' Proactive Management of Security RisksA threat exposure management startup led by an ex-Claroty executive emerged from stealth to help firms proactively manage security risks and improve their defensive postures. The $30 million windfall will help Nagomi develop a comprehensive platform that integrates security tools and data sources.

More from Bank Info Security 26 Apr 2024, 8:00 a.m. Exposure Startup

The L.A. County's Department of Health Services, the second-largest public health care system in the United States, disclosed a data breach after patients' personal and health information was exposed in a data breach resulting from a recent phishing attack impacting over two dozen employees. [...]

More from Bleeping Computer 26 Apr 2024, 7:55 a.m. America Breach Disclosure Exposure Healthcare Phishing

The head of counterintelligence for a division of the Russian Federal Security Service (FSB) was sentenced last week to nine years in a penal colony for accepting a USD $1.7 million bribe to ignore the activities of a prolific Russian cybercrime group that hacked thousands of e-commerce websites. The protection scheme was exposed in 2022 when Russian authorities arrested six members of the group, which sold millions of stolen payment cards at flashy online shops like Trump's Dumps.

More from Krebs on Security 23 Apr 2024, 8:07 a.m. Credit Card Cybercrime E-commerce Exposure Russia Theft