Application Security
Last week, reports surfaced of brute force attacks targeting a large number of WordPress blogs scattered across the Internet. The attacks are still ongoing,...
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
SafeNet has released the latest version of its secure app development technology to help organizations protect their software from counterfeiting and misuse.
Application Security
According a new report from Kaazing, real-time applications are both a curse and a blessing for organizations the world over. Kaazing, the company behind...
Application Security
Security isn’t Binary. The Trick is to Find the Breakeven Between Expenditure of Resources and the Point of Diminishing Returns...
Application Security
Application Security
Organizations can spend as much as $6,500 an hour to recover from distributed denial of service (DDoS) attacks and $3,000 a day recovering from...
Application Security
According to a new report from application security firm Cenzic, Web application vulnerabilities remain an issue, as 99% of the applications they tested were...
Application Security
NT OBJECTives this week launched NTOSpider 6.0, the latest version of its web application scanner, which now enables security teams to scan for vulnerabilities...
Application Security
Symantec made a trio of announcements expanding its Website Security Solutions portfolio on Wednesday, designed to help increase the security and performance needs for...
Application Security
A little over a third of security professionals believe their organizations are investing in the wrong security technologies, according to a recent survey from...
Application Security
F5 Networks expanded its Application Delivery Networking lineup with new and more powerful tools, including a new top-end VIPRION 4800 blade chassis and an...
Application Security
On the December 2012, an Egyptian hacker who calls himself ViruS_HimA claimed to have breached Yahoo!’s security systems and acquire full access to certain...
Application Security
Hosting Provider Says Cross-Site Scripting Attacks Jumped 160 Percent in Q4 2012
Application Security
GitHub's new internal search has made it easy to uncover passwords, encryption keys, and other security missteps in software development projects that are hosted...
Application Security
Last week, Ruby on Rails (RoR), a popular web application framework, was reported as vulnerable to critical vulnerabilities.
Application Security
In a blog post examining cases from 2012, Verizon Business’ Andrew Valentine presented a tale of a critical infrastructure firm in the U.S. who...
Application Security
Software security firm Metaforic on Tuesday announced added support for applications running on BlackBerry 10 to its software protection portfolio.
Application Security
Yearly predictions are always risky. Even more so when your subjects are cybercrime organizations, hacktivist groups, and other security attackers – entities not exactly...
Application Security
A vulnerability (or unintended function) in WordPress that was dismissed six years ago as a something not worth bothering with, has been given a...
Application Security
With So Many Firewalls and Rules, Most Security Administrators Have No Visibility Into What Each Application Requires...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)