Application Security
Webcast: Wednesday, July 31 at 1 PM ET / 10 AM PT
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
A technical advisory from Command Five, an Australian security consultancy, has outlined the recently patched flaws in Atlassian’s Crowd Single Sign-on (SSO) software package....
Application Security
Looking at BYOD from the viewpoint of data matters most. New York’s Mobile Helix is shifting away from train of thought that says security...
Application Security
Facebook on Friday said that phone numbers and email addresses belonging to roughly 6 million of its users had been improperly shared due to...
Application Security
In my previous SecurityWeek column, I wrote about Managing Security with the Business in Mind and discussed briefly the importance of taking an application-centric...
Application Security
Risk I/O, a vulnerability intelligence platform designed to help organizations efficiently report and mitigate security vulnerabilities, on Wednesday announced that it now analyzes real-time,...
Application Security
The Open Web Application Security Project (OWASP) released an update to its Top 10 list of risks facing developers. As in previous years, injection...
Application Security
Trend Micro has launched a new security as a service solution that uses automated and expert analysis to help protect web applications.
Application Security
On Tuesday, Jerry Davis, the VA’s former CISO, told members of the House Veterans' Affairs oversight and investigations subcommittee the sensitive personal information the...
Application Security
Fortinet has introduced a new operating system for its FortiWeb Web application firewalls.
Application Security
A new analysis by NSS Labs puts Microsoft Internet Explorer 10 ahead of the pack when it comes to browser protections against malware downloads.
Application Security
Today’s businesses must be able to rapidly adapt to changing market conditions – to support a new venture, merger/acquisition, etc. As business needs change,...
Application Security
Microsoft's coding practices and methodology complies with an international standard for developing secure software, the company said Tuesday.
Application Security
Smaller open source projects tend to be more secure than proprietary applications, but the opposite is the case for software with more than a...
Application Security
Georgetown University said on Monday that it would launch a new Security and Software Engineering Research Center (S2ERC) later this month that will that...
Application Security
While some best practices such as software security training are effective in getting developers to write secure code, following best practices does not necessarily...
Application Security
The recent increase in the number and severity of cyber attacks around the world demonstrate that we’re squarely in an era referred to as...
Application Security
According to a report released by Imperva this week, threat-blocking efficiency is greatly increased with the addition of crowd-sourced threat intelligence.
Application Security
This week in London, during the InfoSecurity Europe conference, HP released an update to its WebInspect application security tool, designed to replicate real-world attacks...
Application Security
"Effective Security is about Solving problems, Not Chasing Hype..."
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)