Application Security
After operating in stealth mode for roughly two years, Shape Security, a start-up founded by former Google, Department of Defense and defense contractor employees,...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
It’s that time of the year again. Time not only to make resolutions (which I fully plan to keep for at least a whole...
Application Security
RESOURCE - To compete today, your busines
Application Security
In a perfect world, we’d all have strong and different passwords for every site we visit. We know it’s the right thing to do. But...
Application Security
Application Security
As IT security practitioners struggle to defend against APTs (Advanced Persistent Threats), a new study by the Ponemon Institute finds malware installed via zero-day...
Application Security
Application Security
UPDATE: Microsoft late Wednesday confirmed a Windows kernel zero-day vulnerability is being exploited in "limited, targeted attacks" against Windows XP users.
Application Security
Danish bitcoin payment processor BIPS has shut down its free online wallet service after hackers launched a two-stage attack that led to the theft...
Application Security
Get Well, Healthcare.gov! Please.
Application Security
Application Security
According to a recent survey (PDF) of 240 information security professionals around the globe, network operations and applications owners to determine how security management affects organizations’...
Application Security
WhiteHat Security, a Santa Clara, California-based company best known for its Web application security testing solutions, today announced support for analyzing source code written...
Application Security
Cigital on Wednesday announced the fifth major release of the of the Building Security In Maturity Model (BSIMM) study, which collected data from 67...
Application Security
DB Networks, a database security company, has introduced a new security appliance that provides an Intrusion Detection System (IDS) specifically designed to detect and...
Application Security
Hackers looking to steal sensitive data, such as intellectual property, deal data or PII, know exactly where to find it: in the databases, file...
Application Security
Application Security
Cigital, a provider of software security services and solutions, has launched new cloud-based Static and Dynamic Application Security Testing solutions to its lineup.
Application Security
F5 Networks (NASDAQ: FFIV) announced on Tuesday that it would acquire Versafe, a provider of anti-fraud, anti-phishing, and anti-malware solutions.
Application Security
New Capabilities Give Customers More Control to Optimize Website Performance
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)