Application Security
BlackBerry Cylance has prepared an update for its CylancePROTECT product to address a recently disclosed bypass method, but the company has downplayed the impact...
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
Researchers at Australia-based cybersecurity firm Skylight claim to have found a way to trick Cylance’s AI-based antivirus engine into classifying malicious files as benign.
Application Security
A GitLab study based on responses from over 4,000 software professionals shows a disconnect between developer and security teams, and suggests that good DevOps...
Application Security
The Magecart hackers have managed to infect over 17,000 domains by targeting improperly secured Amazon S3 buckets, RiskIQ reports.
Application Security
The Forum of Incident Response and Security Teams (FIRST) on Friday announced version 3.1 of the Common Vulnerability Scoring System (CVSS).CVSS is a widely...
Application Security
The way we build, provision, maintain and secure apps continues to evolve. As agile development practices put pressure on operations, organizations move to DevOps...
Application Security
The U.S. Coast Guard on Monday issued a safety alert advising commercial vessel owners and operators to ensure that effective cybersecurity measures are in...
Application Security
Security information and event management (SIEM) solutions provider Exabeam this week announced the acquisition of cloud application security company SkyFormation.
Application Security
Vulcan Cyber, an Israel-based startup that specializes in vulnerability remediation solutions, on Wednesday announced that it raised $10 million in a Series A funding...
Application Security
Real-time application behavior analytics, control, and protection provider TrueFort has raised $13.7 million in a Series A funding round.
Application Security
Internet security firm Cloudflare this week revealed its participation in “League of Entropy,” a worldwide effort of individuals and academic institutions to bring users...
Application Security
Apple this week unveiled the latest version of its Mac operating system, macOS 10.15 Catalina. In addition to many functionality improvements, the latest macOS...
Application Security
Cybersecurity solutions firm Imperva announced on Tuesday that it has agreed to acquire Distil Networks, an Arlington, Virginia-based provider of bot detection and mitigation...
Application Security
A security breach that led to the premature release of New Zealand's budget resulted from an online bungle, not a sophisticated cyberattack as originally...
Application Security
In many organizations, building and securing apps has typically been a siloed affair. The product owner, the network engineer, the developer and the security...
Application Security
Microsoft-owned GitHub on Thursday announced the introduction of several new security tools and features designed to help developers secure their code.
Application Security
Application Security
Only 15% of Malware-Infected Websites Are Blacklisted, Report Finds
Application Security
WordPress released version 5.2 of the popular content management system (CMS) this week, which includes new security and stability features. Named “Jaco,” the update is...
Application Security
Shape Security has announced a new product designed to protect small and medium business (SMB) websites from the growing scourge of advanced bot-based credential...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)