Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

NIST’s Computer Security Division decided to withdraw 11 outdated SP 800 publications on August 1, 2018 [Read More]
GitHub adds support for Python to its security alerts feature, which notifies developers if their packages contain vulnerabilities [Read More]
Developers of the Gentoo Linux distribution warned users that their GitHub account was hacked and malicious code was planted [Read More]
Identity management solutions provider Ping Identity acquires Elastic Beam and launches AI-based API security product [Read More]
Thousands of mobile applications running on iOS and Android have reportedly exposed over 113 gigabytes of data from 2,300 unsecured Firebase databases. [Read More]
New VirusTotal Monitor service aims to help software developers and antivirus vendors reduce the number of false positive detections [Read More]
Splunk has agreed to acquire alert management start-up VictorOps for approximately $120 million to help solve complex challenges facing Development and DevOps teams. [Read More]
IBM adds two new features to its MaaS360 with Watson unified endpoint management (UEM) product: Business Dashboards for Apps and Policy Recommendation Engine [Read More]
Earlier this year, a security researcher discovered that it was possible to bypass Google’s reCAPTCHA via HTTP parameter pollution. [Read More]
Vulcan Cyber emerges from stealth with $4 million in seed funding and a vulnerability remediation platform [Read More]

FEATURES, INSIGHTS // Application Security

rss icon

Alastair Paterson's picture
A confluence of factors is putting hundreds of thousands of implementations of Enterprise Resource Planning (ERP) applications at risk of cyber attacks.
Jim Ivers's picture
Applications contain three specific components where vulnerabilities can be found, and each must be tested in a different way for security testing to be complete.
Dan Cornell's picture
As you start to get an idea of what your application portfolio looks like, you then need to start determining the specific risks that applications can expose your organization to.
Alan Cohen's picture
From a security perspective, to create understand application dependencies you need not only to understand the flows and servers, you need to understand the ports and underlying processes.
Preston Hogue's picture
Today an organization may have thousands of apps on the internet, but having thousands of monolithic security devices just isn’t practical.
Dan Cornell's picture
Security cannot exist in a vacuum – it must be integrated with the entirety of an organization’s strategy when it comes to securing development operations.
Travis Greene's picture
Shadow IT 2.0 is a symptom of a bigger problem – the inability to maintain digital competitive advantage due to the insufficient pace of code deployment.
Jim Ivers's picture
Savvy organizations have learned how to use a mix of static and dynamic application security testing types to increase their coverage and lower their risk.
Dan Cornell's picture
When security teams can assess brand, financial, strategic risks – they are best able to act as a trusted advisor to DevOps teams as they build and maintain secure systems.
Travis Greene's picture
2017 is the year for information security teams to align to the work being done in DevOps – whether you call it DevSecOps or not.