aDolus Blog | Vulnerability Tracking (2)

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

By Eric Byres on May 21, 2021

So you don’t sell to the Feds… Today’s blog is going to take a break from analyzing a specific section of the Executive Order on Improving the Nation’s Cybersecurity and focus on who will...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

By Eric Byres on May 18, 2021

Removing Barriers to Sharing Threat Information On Friday we dissected Section 4: Enhancing Software Supply Chain Security of the new Executive Order on Improving the Nation’s Cybersecurity...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

4 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

By Eric Byres on May 14, 2021

Late Wednesday night President Biden signed the Executive Order on Improving the Nation’s Cybersecurity. Compared to any Executive Order (EO) I’ve seen, this is a massive and complex...

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

3 min read

Code Signing Software Validation Vulnerability Tracking Supply Chain Management

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

By Eric Byres on January 17, 2020

The announcement Tuesday from the NSA about the new cryptographic vulnerability in the Microsoft Windows operating system sent ripples of shock through our entire community. In case you...

When the Security Researchers Come Knocking, Don’t Shoot the Messenger

3 min read

medical hacking malware vulnerability disclosure Vulnerability Tracking

When the Security Researchers Come Knocking, Don’t Shoot the Messenger

By Eric Byres on November 8, 2018

Our own Jonathan Butts and Billy Rios were interviewed this month on the CBS Morning News about their research showing that medical devices like pacemakers and insulin pumps can be hacked...