Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Hubble Technology banks $9 million in venture capital funding to build an “agentless technology asset visibility” aimed at disrupting the asset management space. [Read More]
ShiftLeft closes a $29 million funding round led by Blackstone Innovations Investments and SYN Ventures. [Read More]
The attackers used stolen OAuth tokens to access GitHub accounts, but cloned only specific private repositories. [Read More]
Endpoint visibility technology vendor Fleet attracted $20 million in new funding at a valuation in the range of $100 million. [Read More]
OpenSSF introduces the Package Analysis project, a novel effort aimed at securing popular open source packages. [Read More]
Researchers at Microsoft find a way to exploit for a pair of privilege escalation flaws to plant a root backdoor on Linux systems. [Read More]
Google said it prevented 1.2 million bad apps from reaching Google Play in 2021, but cybercriminals continue finding ways to deliver their malware via the app store. [Read More]
Synopsys is expanding its reach into the cybersecurity business with plans to shell out $330 million to acquire White Hat security. [Read More]
Enveil, an early-stage startup tackling the 'holy grail' of data encryption, has banked another $25 million in venture capital funding. [Read More]
Israel-based ARMO raises $30 million in a Series A funding round for its open source Kubernetes security platform. [Read More]
FEATURES, INSIGHTS // Application Security
This move to container-based development and agile methodologies has been great for innovation and iteration, but it’s also brought a massive shift in the application landscape with real impact on security teams.
As organizations digitize their business and make these shifts, they need to know what and who they can trust.
By paying just a bit more attention to the permissions you are allowing on your phone or computer, you could protect yourself from a much more significant headache down the road.
While GDPR doesn’t require encryption, there are four mentions of encryption in GDPR that provide real incentives for organizations to use encryption.
A confluence of factors is putting hundreds of thousands of implementations of Enterprise Resource Planning (ERP) applications at risk of cyber attacks.
Applications contain three specific components where vulnerabilities can be found, and each must be tested in a different way for security testing to be complete.
As you start to get an idea of what your application portfolio looks like, you then need to start determining the specific risks that applications can expose your organization to.
From a security perspective, to create understand application dependencies you need not only to understand the flows and servers, you need to understand the ports and underlying processes.
Today an organization may have thousands of apps on the internet, but having thousands of monolithic security devices just isn’t practical.
Security cannot exist in a vacuum – it must be integrated with the entirety of an organization’s strategy when it comes to securing development operations.
Get the Daily Briefing
- Nikkei Says Customer Data Likely Impacted in Ransomware Attack
- New Brute Force Attacks Against SQL Servers Use PowerShell Wrapper
- DoJ Will No Longer Use CFAA to Charge Ethical Hackers
- Pro-Russian Hackers Spread Hoaxes to Divide Ukraine, Allies
- Researchers Spot Supply Chain Attack Targeting GitLab CI Pipelines
- Phishers Add Chatbot to the Phishing Lure
- QuSecure Lauches Quantum-Resilient Encryption Platform
- Cloud Data Security Firm Dig Emerges From Stealth With $11 Million in Funding
- US Recovers $15 Million From Ad Fraud Group
- Enterprise Data Protection Company Seclore Raises $27 Million
Copyright © 2022 Wired Business Media. All Rights Reserved. Privacy Policy