What corporate security pros should do about Shellshock/Bash bug

Network World | September 26, 2014

Patching is best to address Shellshock/Bash bug, but blocking attacks before they get to vulnerable machines is quicker. These outside defenses can include new rules for Web application firewalls and network intrusion devices that would pick up on attack signatures, says Jeff Schilling, CSO of secure cloud provider Firehost and the former head of the U.S. Army Security Operations Center.