Application Security
Georgetown University said on Monday that it would launch a new Security and Software Engineering Research Center (S2ERC) later this month that will that...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
While some best practices such as software security training are effective in getting developers to write secure code, following best practices does not necessarily...
Application Security
The recent increase in the number and severity of cyber attacks around the world demonstrate that we’re squarely in an era referred to as...
Application Security
According to a report released by Imperva this week, threat-blocking efficiency is greatly increased with the addition of crowd-sourced threat intelligence.
Application Security
This week in London, during the InfoSecurity Europe conference, HP released an update to its WebInspect application security tool, designed to replicate real-world attacks...
Application Security
"Effective Security is about Solving problems, Not Chasing Hype..."
Application Security
Last week, reports surfaced of brute force attacks targeting a large number of WordPress blogs scattered across the Internet. The attacks are still ongoing,...
Application Security
SafeNet has released the latest version of its secure app development technology to help organizations protect their software from counterfeiting and misuse.
Application Security
According a new report from Kaazing, real-time applications are both a curse and a blessing for organizations the world over. Kaazing, the company behind...
Application Security
Security isn’t Binary. The Trick is to Find the Breakeven Between Expenditure of Resources and the Point of Diminishing Returns...
Application Security
Application Security
Organizations can spend as much as $6,500 an hour to recover from distributed denial of service (DDoS) attacks and $3,000 a day recovering from...
Application Security
According to a new report from application security firm Cenzic, Web application vulnerabilities remain an issue, as 99% of the applications they tested were...
Application Security
NT OBJECTives this week launched NTOSpider 6.0, the latest version of its web application scanner, which now enables security teams to scan for vulnerabilities...
Application Security
Symantec made a trio of announcements expanding its Website Security Solutions portfolio on Wednesday, designed to help increase the security and performance needs for...
Application Security
A little over a third of security professionals believe their organizations are investing in the wrong security technologies, according to a recent survey from...
Application Security
F5 Networks expanded its Application Delivery Networking lineup with new and more powerful tools, including a new top-end VIPRION 4800 blade chassis and an...
Application Security
On the December 2012, an Egyptian hacker who calls himself ViruS_HimA claimed to have breached Yahoo!’s security systems and acquire full access to certain...
Application Security
Hosting Provider Says Cross-Site Scripting Attacks Jumped 160 Percent in Q4 2012
Application Security
GitHub's new internal search has made it easy to uncover passwords, encryption keys, and other security missteps in software development projects that are hosted...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)