Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
A recent attack targeted Drupal web servers with a chain of vulnerabilities that included the infamous Drupalgeddon2 and DirtyCOW flaws, Imperva security researchers say. [Read More]
Private equity investment firm Thoma Bravo acquires Veracode from Broadcom for $950 million in cash [Read More]
The sheer quantity of weaknesses, concerns and vulnerabilities exposed by even the largest companies is far greater than most people would realize. [Read More]
Department of Defense announces new Hack the Pentagon bug bounty program that allows it to run year-long assessments for high-value systems [Read More]
Chef Software has announced the latest version of its InSpec compliance automation platform for DevSecOps. [Read More]
IBM Security Connect is a new cloud platform that brings together data, applications and tools from over a dozen vendors [Read More]
Google is shutting down the consumer version of its Google+ online social network after fixing a bug exposing private data in as many as 500,000 accounts. [Read More]
Facebook provides update on recent hacker attack. The company says there is no evidence the attackers accessed any apps using the compromised tokens [Read More]
"Credential Stuffing is growing fast," Rich Bolstridge, chief strategist for financial services at Akamai Technologies, told SecurityWeek. "In March and April 2018 we logged over 6 billion malicious login attempts. By May and June, this had risen to more than 8 billion attempts." [Read More]
BGP (Border Gateway Protocol) routing isn’t secure and organizations should embrace Resource Public Key Infrastructure (RPKI) to improve security, Cloudflare says. [Read More]
- 1 of 40
- ››
FEATURES, INSIGHTS // Application Security
By paying just a bit more attention to the permissions you are allowing on your phone or computer, you could protect yourself from a much more significant headache down the road.
While GDPR doesn’t require encryption, there are four mentions of encryption in GDPR that provide real incentives for organizations to use encryption.
A confluence of factors is putting hundreds of thousands of implementations of Enterprise Resource Planning (ERP) applications at risk of cyber attacks.
Applications contain three specific components where vulnerabilities can be found, and each must be tested in a different way for security testing to be complete.
As you start to get an idea of what your application portfolio looks like, you then need to start determining the specific risks that applications can expose your organization to.
From a security perspective, to create understand application dependencies you need not only to understand the flows and servers, you need to understand the ports and underlying processes.
Today an organization may have thousands of apps on the internet, but having thousands of monolithic security devices just isn’t practical.
Security cannot exist in a vacuum – it must be integrated with the entirety of an organization’s strategy when it comes to securing development operations.
Shadow IT 2.0 is a symptom of a bigger problem – the inability to maintain digital competitive advantage due to the insufficient pace of code deployment.
Savvy organizations have learned how to use a mix of static and dynamic application security testing types to increase their coverage and lower their risk.
- 1 of 9
- ››
SecurityWeek Daily Briefing
- Backdoor Targeting Malaysian Government a "Mash-up" of Malware
- Serious Flaws Found in ABB Safety PLC Gateways
- Untangle Partners With Malwarebytes to Bring Layered Security to SMBs
- Oath Paid Out $5 Million in Bug Bounties in 2018
- Data Protection Firm Egress Raises $40 Million
- WordPress Patches Privilege Escalation Vulnerabilities
- OT Incident Response: Is it Mission Impossible?
- Testing Security Products: Third-Party Standards vs. In-House Testing
- Czech Warning Over Huawei, ZTE Security 'Threat'
- Twitter Warns of Possible State-Sponsored Attack
Copyright © 2018 Wired Business Media. All Rights Reserved. Privacy Policy