Application Security
A rite of passage for new parents is child-proofing—securing the home from threats to children. Most experts on the subject highly recommend that parents...
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
The first platform update for Microsoft Edge, released by the tech giant last week, brings several improvements to the web browser’s rendering engine, including...
Application Security
Attacks designed to compromise users and steal sensitive data are increasing in magnitude and velocity as cybercriminals leverage automated tools, Imperva’s annual Web Application...
Application Security
Hackers breached the systems of anti-adblocking solutions provider PageFair and used the access to deliver malware via the publishers that rely on the company’s...
Application Security
Netflix this week released an in-house developed tool for discovering cross-site scripting (XSS) vulnerabilities in applications and for scanning secondary software programs for potential...
Application Security
Amazon announced last week its intention to stop accepting Flash-based advertisements for Amazon.com. The decision comes after major web browser vendors decided to implement...
Application Security
Facebook announced today the general availability of Security Checkup, a new tool designed to help users better protect their accounts.
Application Security
Network traffic visibility platform provider Gigamon (NYSE: GIMO) has launched a new platform designed to give enterprises extensive visibility into network traffic, users, applications...
Application Security
While container adoption is likely to surge over the next few years, concerns around security, certification and adequate skills remain, according to a recent...
Application Security
After malicious actors started adapting their techniques, Google has decided to ban the installation of extensions for the Chrome web browser from sources other...
Application Security
SAP has fixed multiple vulnerabilities in compression libraries used in several SAP products discovered by Core Security researchers. Administrators should check the Support Portal...
Application Security
Attackers typically use one of three common techniques to compromise SAP systems at the application layer: pivoting, portal attacks, and database warehousing, according to...
Application Security
Google today released Password Alert, a free and open-source Chrome extension designed to protect Google and Google Apps for Work accounts against phishing attacks.
Application Security
RSA Conference 2015 -- "The DevOps train is coming, and security can choose to get on board or not, but DevOps isn't going away."
Application Security
Cloud security and compliance solutions provider Qualys today announced a new version of its Web Application Scanning (WAS) solution.
Application Security
Companies need to find a new approach to IT security if they want to be successful in today’s application economy, according to a new...
Application Security
Contrast Security announced on Monday the availability of a free plugin that allows software developers to easily find vulnerabilities in their applications.
Application Security
Application Security
For far too long, the conversation around cloud and security has revolved around Shadow IT, the use of cloud applications that IT doesn’t know...
Application Security
Current Certification and Accreditation Regimes Have Become a Hindrance to the Rapid Fielding of Effective Software Solutions
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)