Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Of 4,000 software professionals surveyed by GitLab, 69% of developers are aware they’re expected to write secure code, but nearly half of security pros say it’s hard to get developers to make vulnerability remediation a priority. [Read More]
The Magecart hackers have managed to infect over 17,000 domains by targeting improperly secured Amazon S3 buckets, RiskIQ reports. [Read More]
The Forum of Incident Response and Security Teams (FIRST) announces CVSS v3.1, which aims to simplify and improve upon CVSS v3.0. [Read More]
U.S. Coast Guard recently warned commercial vessel owners and operators of malware and phishing attacks and potential vulnerabilities in shipboard systems. [Read More]
SIEM solutions provider Exabeam this week announced the acquisition of cloud application security company SkyFormation. [Read More]
Vulcan Cyber, an Israel-based startup that specializes in vulnerability remediation solutions, raised $10 million in a Series A funding round. [Read More]
Real-time application behavior analytics, control, and protection provider TrueFort has raised $13.7 million in a Series A funding round. [Read More]
Internet security firm Cloudflare has joined the “League of Entropy,” a worldwide effort of individuals and academic institutions to bring users a quorum of decentralized randomness beacons. [Read More]
macOS 10.15 Catalina brings several security-related improvements, including an enhanced Gatekeeper, a dedicated read-only volume for the OS, data protections, and support for Activation Lock. [Read More]
Cybersecurity solutions firm Imperva has agreed to acquire Distil Networks, an Arlington, Virginia-based provider of bot detection and mitigation solutions for an undisclosed sum. [Read More]
- 1 of 46
- ››
FEATURES, INSIGHTS // Application Security
The best way for the security industry to meet the challenge of modern applications and modern app development is to adopt a modern way of supporting those from a security perspective.
ChatOps offers a bridge to a fully realized vision for DevSecOps, offering a much quicker path to resolution for both security and non-security issues.
If done right and integrated throughout the process, security ends up being not a source of friction, but a function that protects the business, at the speed of business.
With a holistic approach you can enable efficient segmentation across your infrastructure, identify anomalies faster by using process behavior deviations, and reduce your attack surface quickly.
This move to container-based development and agile methodologies has been great for innovation and iteration, but it’s also brought a massive shift in the application landscape with real impact on security teams.
As organizations digitize their business and make these shifts, they need to know what and who they can trust.
By paying just a bit more attention to the permissions you are allowing on your phone or computer, you could protect yourself from a much more significant headache down the road.
While GDPR doesn’t require encryption, there are four mentions of encryption in GDPR that provide real incentives for organizations to use encryption.
A confluence of factors is putting hundreds of thousands of implementations of Enterprise Resource Planning (ERP) applications at risk of cyber attacks.
Applications contain three specific components where vulnerabilities can be found, and each must be tested in a different way for security testing to be complete.
- 1 of 9
- ››
SecurityWeek Daily Briefing
- Iowa Grocery Chain Investigating Possible Hack of Payment Processing Systems
- Apple Sues Corellium Over Security Research Tool
- Uganda Slams Report Huawei Helped Spy on Opposition Leader
- Many Users Don't Change Unsafe Passwords After Being Warned: Google
- Sherlock in the SOC: Leveraging Security Knowledge in a Behavior-Based Approach
- Cybersecurity Has Become a Political Issue for Americans, Survey Shows
- Many Apache Struts Security Advisories Updated Following Review
- ECB Uncovers Data Breach in Bank Newsletter
- Vulnerability Patched in Firefox Password Manager
- Intel Patches High-Severity Flaws in Tools, NUC Firmware
Copyright © 2019 Wired Business Media. All Rights Reserved. Privacy Policy