Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le août 10, 2017, 18:02:47
-
Beware of Security by Press Release
On Wednesday, the security industry once again witnessed an all-too-familiar cycle: I call it "Security by press release." It goes a bit like this: A security firm releases a report claiming to have unearthed a major flaw in a competitor's product; members of the trade press uncritically republish the claims without adding much clarity or waiting for responses from the affected vendor; blindsided vendor responds in a blog post showing how the issue is considerably less dire than originally claimed.
At issue are claims made by Denver-based security company DirectDefense, which published a report this week warning that Cb Response -- a suite of security tools sold by competitor Carbon Black (formerly Bit9) -- was leaking potentially sensitive and proprietary data from customers who use its product.
Source: Beware of Security by Press Release (https://krebsonsecurity.com/2017/08/beware-of-security-by-press-release/)