Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Cybercriminals are targeting websites running the Magento platform to inject them with code that can steal credit card data and infect visitors with malware, Flashpoint reports. [Read More]
VMware acquires threat detection and response firm E8 Security. This is the third cloud and security-related acquisition made by VMware in less than two months [Read More]
Drupal announced plans to release a security update for Drupal 7.x, 8.3.x, 8.4.x, and 8.5.x on March 28, 2018, aimed at addressing a highly critical vulnerability. [Read More]
Attackers can use online sandbox services to exfiltrate data from an isolated network, a security researcher has discovered. [Read More]
White hats managed to hack Microsoft Edge, Oracle VirtualBox and Apple Safari on the first day of the Pwn2Own 2018 hacking contest, earning a total of $162,000 [Read More]
Luminate emerges from stealth with $14 million in funding and a platform that secures access to enterprise applications and resources in hybrid cloud environments [Read More]
Biometric authentication firm BioCatch has raised $30 million in new growth financing led by Maverick Ventures. [Read More]
The new and emerging world of artificial intelligence -- that is, algorithms -- promises huge benefits for industry in increased speeds and lower costs; just as it does in the financial markets. [Read More]
Schneider Electric patches vulnerabilities in IGSS automation system, including in SCADA software and mobile applications [Read More]
Gas stations exposed to remote hacker attacks due to several vulnerabilities found in a widely used automation system [Read More]
- 1 of 36
- ››
FEATURES, INSIGHTS // Application Security
Applications contain three specific components where vulnerabilities can be found, and each must be tested in a different way for security testing to be complete.
As you start to get an idea of what your application portfolio looks like, you then need to start determining the specific risks that applications can expose your organization to.
From a security perspective, to create understand application dependencies you need not only to understand the flows and servers, you need to understand the ports and underlying processes.
Today an organization may have thousands of apps on the internet, but having thousands of monolithic security devices just isn’t practical.
Security cannot exist in a vacuum – it must be integrated with the entirety of an organization’s strategy when it comes to securing development operations.
Shadow IT 2.0 is a symptom of a bigger problem – the inability to maintain digital competitive advantage due to the insufficient pace of code deployment.
Savvy organizations have learned how to use a mix of static and dynamic application security testing types to increase their coverage and lower their risk.
When security teams can assess brand, financial, strategic risks – they are best able to act as a trusted advisor to DevOps teams as they build and maintain secure systems.
2017 is the year for information security teams to align to the work being done in DevOps – whether you call it DevSecOps or not.
OODA loop is a well established concept often used in security which originated in the military. OODA stands for Observe, Orient, Decide, Act.
- 1 of 8
- ››
SecurityWeek Daily Briefing
- Portugal Joins NATO Cyber-Defence Centre
- $35 Million Penalty for Not Telling Investors of Yahoo Hack
- Cambridge Analytica Says it is 'No Bond Villain'
- Safe Browsing Now On by Default on Android
- Clear Scope for Conflict Between Privacy Laws
- Vulnerability in NVIDIA Tegra Chipsets Allows for Code Execution
- Hackers Can Steal Cryptocurrency From Air-Gapped Wallets: Researcher
- Code Execution Flaws Patched in Foxit PDF Reader
- Drupal to Release Second Drupalgeddon2 Patch as Attacks Continue
- Flexibility vs. Security - A False Choice
Copyright © 2018 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use