Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
Google this week announced plans to turn off access to G Suite account data for less secure apps (LSAs), as they represent a potential...
Application Security
Google on Monday announced that it has released the source code of a tool designed to help developers identify vulnerabilities related to file access.
Application Security
Cisco Talos this week released a new tool designed to make it easier to create complex applications that have lengthy dependency chains.Called Mussels, the...
Application Security
Google has shared some data on the adoption of Transport Layer Security (TLS) by Android applications and it seems that significant progress has been...
Application Security
Years ago, I worked on a consulting project for a large financial services company, which had recently invested $20 million into their core offering,...
Application Security
Google this week announced a partnership with several security solutions providers, aimed at fighting bad applications in the Android ecosystem.
Application Security
Arizona transportation officials announced enhanced security measures Thursday for a state website that identity thieves exploited to get dozens of duplicate driver's licenses.The Arizona...
Application Security
In the old world, applications generally consisted of a web server, an app server and a database. Traffic went from router to switch to...
Application Security
An update that Apple will soon release for iOS 13 and iPadOS should resolve an issue that leads to third-party keyboard apps getting elevated...
Application Security
The POISON CARP threat actor has targeted senior members of Tibetan groups via WhatsApp for around six months.
Application Security
Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.
Application Security
Windows 7 and Windows Server 2008 will officially reach end-of-support on January 14, 2020, but they will continue to receive security patches past that...
Application Security
Cisco Talos has released two new open source tools for IDA Pro, namely GhIDA, an IDA Pro plugin, and Ghidraaas (Ghidra as a Service),...
Application Security
CircleCI, a San Francisco-based company that specializes in continuous integration and delivery solutions, on Thursday informed customers that some of their information may have...
Application Security
On the second day of its 2019 VMworld conference, VMware unveiled a series of new and enhanced network and security capabilities for the company’s...
Application Security
There’s no question the world is getting more agile. These days even companies in traditional brick and mortar industries, those luddites and laggards from...
Application Security
Bolting Security on to DevOps Without Full Integration is Little More Than Keeping Security in its Own Separate Silo
Application Security
A misconfiguration in the popular JIRA project management software exposed a great deal of data on hundreds of companies, security researcher Avinash Jain reveals.
Application Security
Hackers have managed to compromise 62 colleges and universities by exploiting a vulnerability in the Ellucian Banner system, the U.S. Department of Education warns.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)