Application Security
Report Shows Organizations Continue to Lack Communication and Understanding of Data and Application Security Strategies. A trio comprised of Application Security, Inc., Unisphere Research,...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
New SecurityWeek Series from Vincent Liu - "Lessons from the Trenches on Implementing a Secure Development Lifecycle"
Application Security
Today at Black Hat DC, Microsoft is releasing a beta version of Attack Surface Analyzer, a new (and free!) tool designed to help assess...
Application Security
As the year comes to a close, we thought it would be appropriate to highlight some of the best stories and columns for 2010....
Application Security
Core Security Technologies, a Boston based provider of IT security testing and measurement solutions, today introduced the latest version of its automated penetration testing...
Application Security
A report released today by Imperva, a provider of data security solutions, shares predictions on what we could expect to see in 2011 and...
Application Security
Location Labs Inc., a provider of mobile location-as-a-service infrastructure and applications, today announced the launch of Sparkle, a next-generation mobile location, controls, and security...
Application Security
Quova Helps Developers Integrate Security and Compliance Features into Applications Using Free IP Geolocation Quova, Inc., a provider of IP Geolocation data, has rolled...
Application Security
Solution Combines Tokenization and Encryption to Help Protect Sensitive Application Data RSA this week announced its RSA Data Protection Manager product, which combines tokenization...
Application Security
Rapid7, a Boston, Massachusetts based provider of vulnerability management and penetration testing solutions, today announced the availability of Metasploit Pro, its new software targeted...
Application Security
While Bugs May No Longer Be Free, Exploits Really Want To Be
Application Security
Microsoft Releases Enhanced Mitigation Experience Toolkit (EMET) 2.0 Announced at the Black Hat 2010 conference in July, Microsoft’s updated Enhanced Mitigation Experience Toolkit (EMET) 2.0...
Application Security
IBM released its X-Force 2010 Mid-Year Trend and Risk Report today, which showed record threat levels in almost every area.
Application Security
Securing the Extended EnterpriseAs corporations expand their reliance on the Internet and technology to conduct business, most work diligently to reduce their exposure to...
Application Security
Solace Systems and Layer 7 Technologies Team Up on Scalable Messaging for SOA and Cloud EnvironmentsSolace Systems and Layer 7 Technologies have announced a...
Application Security
A shocking 87 percent of the victims in a study of data breaches jointly conducted by Verizon and the U.S. Secret Service had evidence...
Application Security
Today at Black Hat USA 2010 in Las Vegas, Qualys will unveil an open source web application fingerprinting engine that identifies application and plugin...
Application Security
Fifty-six percent of companies that have deployed interactive Web 2.0 applications have taken steps to prevent hacking, and the other 46 percent should, according...
Application Security
IBM Security Network Intrusion Prevention System helps manage a variety of network security capabilities through one unified platform.
Application Security
European enterprises are beginning to embrace the benefits of virtualizing IT assets and accessing applications through the cloud, but still are concerned about security...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)