Starting today, the lifespan of new TLS certificates will be limited to 398 days, a little over a year, from the previous maximum certificate lifetime of 27 months (825 days). In a move that’s meant to boost security, Apple, Google, and Mozilla are set to reject publicly rooted digital certificates [...]
All modern software contains vulnerabilities; either software defects that require patches to remedy, or configuration issues that require administrative activity to resolve.
For this reason, organisations should have a vulnerability management process which enables them to know what vulnerabilities are present within their IT estate on a regular basis. Executive staff should ideally be as aware of the major vulnerabilities in their IT estate as they are of their financial status.