Application Security
Oracle has released the latest version of its application virtualization software Secure Global Desktop to improve security and user experience.
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
Gauss: "Nation-state cyber-surveillance meets banking Trojan"Researchers at Kaspersky Lab have uncovered what they believe is another nation-state sponsored cyber-espionage toolkit designed to steal data...
Application Security
Hackers’ Investment in Evasion Techniques Proves That They See Web Applications as a Valuable Attack Surface
Application Security
According to separate reports from data security firm Imperva, and FireHost, a cloud hosting company, SQL Injection (SQLi) attacks were the number one attack...
Application Security
Securing The Virtualized Data Center - Top Five Considerations
Application Security
Trustwave and Microsoft Team to Bring Open-Source Web Application Firewall ModSecurity To IIS and Ngix Web Servers
Application Security
Last month, a spotlight was put on a MySQL authentication bypass vulnerability that gave hackers a one out of 256 chance to gain access...
Application Security
A group of software security experts has issued guidelines designed to reduce the number of exploitable vulnerabilities ending up in production code.
Application Security
Formspring, the Social Q&A portal focused on conversations and personal interests, admitted to being breached on Tuesday. The compromise led to the loss of...
Application Security
Web Application Security gurus, WhiteHat Security, released a report this week that examines the severity and duration of Web application security related vulnerabilities discovered...
Application Security
WhiteHat Security, a Santa Clara, California based company best known for its Web application security testing solutions, today launched “Sentinel Source”, a new Static...
Application Security
Web performance and security firm, CloudFlare, this week announced launched new services with increased performance and features designed to address the needs of larger...
Application Security
In an effort to help organizations develop mobile applications that have security baked-in from the start, IBM has announced a series of static application...
Application Security
Juniper Networks Updates Mykonos Web Security Software With Improved Protection, Simplified Management and Increased Scalability.
Application Security
Revelations about a recent breach of confidential data in Utah highlights how configuration errors can end up being costly.A recent data breach that exposed...
Application Security
UK-based IT solutions firm, NCC Group, today anounced a new service that lets organizations simulate the world’s most common form of cyber attack –...
Application Security
Yahoo! has strengthened its webmail filters after researchers at Trend Micro detected a JavaScript attack last week that was targeting its users. In the...
Application Security
What makes you think your financial institution’s web site is truly secure? Millions of identities, credit card numbers and user login credentials are still...
Application Security
There is a class of complex vulnerabilities that are difficult to test for, are exploited in clever, stealthy attacks and can cost enterprises millions...
Application Security
A new report by application security vendor Veracode paints a not-so-rosy picture of application development programs.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)