Application Security
Networking solutions provider Blue Coat Systems announced on Tuesday that it has released updates to its PacketShaper appliances. The updates offer more visibility into...
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
When I was a boy growing up in New Jersey, the basement in our older family home would flood several times a year. It...
Application Security
Company: Foresight | Who: Israel Ragutski, Co-Founder and CTO
Application Security
We all stumble across the occasional Bluebird - an upgrade to first-class on a trans-country flight, a parking spot just in front of the...
Application Security
Just when you start getting comfortable thinking that DDoS or SQL injections are the attack methods that deserve your heavyweight protective measures, another type...
Application Security
With more than $32 billion in reported cyber-security losses in the U.S. alone last year (and with unreported losses likely to be equally huge),...
Application Security
Open Source Library Aims To Help Developers Remediate Common Security Defects in Java Web Applications
Application Security
Researchers Find Nine Application Technologies Overlooked By Most Web Application Scanners
Application Security
Researchers from two universities in Germany have published a paper on the state of SSL within several Android applications, and the findings were far...
Application Security
The Industrialization of Hacking Has Created a Wave of Threats That are Increasingly Sophisticated
Application Security
Stealth security startup Cylance has acquired Ridgeway Internet Security, a software company specializing in Web application firewalls and honeypot technology.
Application Security
A new survey underscores how business logic attacks can slip under the radar of development teams and cost enterprises time and money.
Application Security
Nominum’s New Platform Is Designed To Help Network Operators Make Their Networks Safer and More Efficient
Application Security
Employees are increasingly turning to web-based or web-enabled applications to help get their jobs done. To combat the risks associated with these applications, one...
Application Security
Veracode Launches Vendor Application Security Testing ProgramApplication security testing firm Veracode on Wednesday launched an automated program to help businesses evaluate security risks associated with...
Application Security
Cigital announced the release of the fourth version of the Building Security In Maturity Model (BSIMM) study, gathering data from 51 security initiatives at...
Application Security
Threat prevention provider FireEye, and Splunk, the recently gone public provider of software that helps organizations gather and make use of machine data from...
Application Security
The HoneyNet Project has released a new version of the Glastopf Web application honeypot software, which can now replicate SQL Injection attacks. The additional...
Application Security
Splunk, the recently gone public provider of software that helps organizations gather and make use of machine data from a diverse set of sources,...
Application Security
While SQL Injection Attacks are Growing in Frequency, Savvy Application Developers Can Find Enough Available Tools to Combat Them
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)