Application Security
Revelations about a recent breach of confidential data in Utah highlights how configuration errors can end up being costly.A recent data breach that exposed...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
UK-based IT solutions firm, NCC Group, today anounced a new service that lets organizations simulate the world’s most common form of cyber attack –...
Application Security
Yahoo! has strengthened its webmail filters after researchers at Trend Micro detected a JavaScript attack last week that was targeting its users. In the...
Application Security
What makes you think your financial institution’s web site is truly secure? Millions of identities, credit card numbers and user login credentials are still...
Application Security
There is a class of complex vulnerabilities that are difficult to test for, are exploited in clever, stealthy attacks and can cost enterprises millions...
Application Security
A new report by application security vendor Veracode paints a not-so-rosy picture of application development programs.
Application Security
According to new research from Bit9, 61% of IT security professionals are concerned about attacks from Anonymous or other hacktivists. The data comes from...
Application Security
Veracode, a Burlington, Massachusetts-based provider of application security solutions, today announced that it has secured $30 million in funding, bringing its total funding to...
Application Security
Mocana MAP 2.0 Helps Secure Apps Running on iOS DevicesSmart device security firm Mocana, today introduced the latest version of its solution designed to...
Application Security
GreenSQL, a company that SecurityWeek first met earlier this year during the RSA Conference, recently released the results of a poll that included more...
Application Security
Web Application Firewalls: What Approach Should You Take To Evaluate WAF Solutions? In my previous column, I focused on various features you should check...
Application Security
With estimated worldwide cyber crime losses in 2011 over $388 billion, corporations, both large and small, are focusing considerable attention towards the security of...
Application Security
A new survey of developers and security professionals revealed that many organizations are still not baking security into the application development process.According to research...
Application Security
On Wednesday, the AntiSec movement defaced hundreds of websites in what was said to be proof that the movement works just fine without Sabu,...
Application Security
Web Application Firewalls: What Should You Keep In Mind When Evaluating WAF Solutions?
Application Security
Akamai Introduces Integrated Security Suite Designed to Help Enterprises Defend Against DDoS and Application Security Attacks
Application Security
In my previous column I touched on the point of implementing Web Application Firewalls (WAFs) as part of a measure to prevent clickjacking. I...
Application Security
LOIC DDoS Attack Tool Now Available for Google Android Devices
Application Security
In college, I took a required Computer Science class called “Systems Principles”. My professor started the class by listing out the seven key components...
Application Security
Protests against Apple and Foxconn due to furor over reports about working conditions have gone digital.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)