Application Security
SOA Software, a Service Oriented Architecture (SOA) and cloud services Governance provider, announced the availability of Atmosphere, an API Management solution that manages, monitors...
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
Web Security - Are Regulations Falling Behind?
Application Security
Application Whitelisting and Change Policy Management Ensure that Data and Applications are Protected Today’s cyberspace is often compared to the Wild West, with good...
Application Security
Why Are Organizations Not Taking Extra Measures to Protect all their Web Applications?
Application Security
Coverity, a company that helps developers reduce defects and increase security in their software, announced the results of its "Software Integrity Risk Report" today.
Application Security
Imperva, a provider of data security solutions, today announced a cloud-based Web Application Firewall service targeted toward small to mid-enterprise businesses looking to achieve...
Application Security
Coverity, a company that helps developers reduce defects and increase security in their software, today released a new solution for code governance that enables...
Application Security
Guide To Securing Databases Breaks Down Very Complicated Endeavor Into Set of Simple Process Maps, Associated Metrics To Guide Implementation and Define Success
Application Security
Web Application Security Best Practices - How to Raise the Bar so Hackers Have to Work Hard to Get Through
Application Security
Trustwave today announced updates and enhancements to ModSecurity, the open source web application firewall (WAF) engine for Apache, developed and managed by Trustwave's security...
Application Security
Microsoft released its first ever Security Development Lifecycle (SDL) Progress Report today, outlining nine years of progress developing, improving and adopting the SDL process.
Application Security
NEI, a Canton, Massachusetts provider of solutions for software technology developers and OEMs, today announced that it has been awarded a US Patent for...
Application Security
Rapid7 today announced upgrades to its Metasploit Pro penetration testing solution. The latest version (v3.6) adds an enhanced command-line feature set and detailed PCI...
Application Security
According to a recent survey, 90 percent of U.S. and UK IT managers said they are planning to implement new mobile applications this year,...
Application Security
Report Shows Organizations Continue to Lack Communication and Understanding of Data and Application Security Strategies. A trio comprised of Application Security, Inc., Unisphere Research,...
Application Security
New SecurityWeek Series from Vincent Liu - "Lessons from the Trenches on Implementing a Secure Development Lifecycle"
Application Security
Today at Black Hat DC, Microsoft is releasing a beta version of Attack Surface Analyzer, a new (and free!) tool designed to help assess...
Application Security
As the year comes to a close, we thought it would be appropriate to highlight some of the best stories and columns for 2010....
Application Security
Core Security Technologies, a Boston based provider of IT security testing and measurement solutions, today introduced the latest version of its automated penetration testing...
Application Security
A report released today by Imperva, a provider of data security solutions, shares predictions on what we could expect to see in 2011 and...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)