Application Security
The Security Revolution Will Be AutomatedInformation security teams have the largely thankless responsibility of simultaneously keeping pace with trends in enterprise computing as well...
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
The Open Web Application Security Project (OWASP) announced on Wednesday the availability of version 4 of the OWASP Testing Guide.
Application Security
Veracode, a Burlington, Massachusetts-based provider of web and mobile application security testing solutions, today announced that it has closed a late-stage $40 million funding...
Application Security
A popular WordPress plugin that enables users to easily create responsive sliders is plagued by a security hole that has been actively exploited by...
Application Security
Cybercriminals have compromised the website of an industrial company to conduct a watering hole attack with the goal to collect information on the site's...
Application Security
Skyfence, a cloud security gateway startup acquired by Imperva earlier this year, announced on Tuesday the availability of a free tool designed to provide...
Application Security
The IEEE (Institute of Electrical and Electronics Engineers) Center for Secure Design has published some advice to help software developers dodge common mistakes that compromise security.
Application Security
An analysis of free applications in the Google Play app store found many popular Android apps had SSL vulnerabilities that left them susceptible to...
Application Security
Researchers at dxw Security have discovered a flaw in the WordPress Mobile Pack plugin that can be exploited to access password-protected posts.
Application Security
Over the last year or so, the “Cloud Access Security Broker” market, as defined by Gartner, has exploded (451 Research calls it the “Cloud...
Application Security
For the first time ever, the security teams at Drupal and WordPress have worked together on addressing a remotely exploitable vulnerability that affects tens...
Application Security
Pwn Pulse Combines “Hack-in-a-box” Sensors with Central Management for Remote Location Intelligence
Application Security
Pre-release notes published by Apple for OS X Mavericks 10.9.5 and Yosemite Developer Preview 5 are informing developers that they might have to re-sign...
Application Security
An Australian security researcher has uncovered a bug that provided him access to an unsecured administration panel for an internal content management system (CMS)...
Application Security
Enterprises Can Gain Competitive Advantages by Having IT Focus on the Things That Matter – Users and Information
Application Security
Network security solutions provider Fortinet announced on Monday that it has introduced a new on-demand, pay-as-you-go offering for its FortiWeb-VM Web Application Firewalls (WAFs)...
Application Security
PayPal has fixed a filter bypass flaw and a persistent input validation vulnerability affecting its MultiOrder Shipping application. PayPal MultiOrder Shipping (MOS) is a...
Application Security
Security threats do not always start with malware sneaking its way onto a computer. Sometimes, they can begin with applications downloaded knowingly by employees...
Application Security
The Covert Redirect issue, the reportedly "serious vulnerability" uncovered recently in login tools OAuth and OpenID, places the responsibility for user security in the...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)