Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
BGP (Border Gateway Protocol) routing isn’t secure and organizations should embrace Resource Public Key Infrastructure (RPKI) to improve security, Cloudflare says. [Read More]
Rapid7 adds automation and orchestration capabilities to its Insight Platform, and new automation functionality to vulnerability management and incident response tools [Read More]
Payment card data from customers of hundreds of e-commerce websites may have been stolen after the MageCart threat actors managed to compromise customer engagement service Feedify. [Read More]
Instagram this week announced new features to boost account security and provide users with increased visibility into accounts with a large number of followers. [Read More]
Semmle, a company whose software engineering analytics platform is used by Microsoft, Google, NASA and others, launches globally with $21 million in funding [Read More]
NCC Group releases Singularity of Origin, an open source tool that makes it easier for penetration testers and others to perform DNS rebinding attacks [Read More]
Brand new Mac computers used in enterprise environments can be hacked on the first boot via Apple’s mobile device management (MDM) protocol, researchers show [Read More]
NIST’s Computer Security Division decided to withdraw 11 outdated SP 800 publications on August 1, 2018 [Read More]
GitHub adds support for Python to its security alerts feature, which notifies developers if their packages contain vulnerabilities [Read More]
Developers of the Gentoo Linux distribution warned users that their GitHub account was hacked and malicious code was planted [Read More]
- 1 of 39
- ››
FEATURES, INSIGHTS // Application Security
By paying just a bit more attention to the permissions you are allowing on your phone or computer, you could protect yourself from a much more significant headache down the road.
While GDPR doesn’t require encryption, there are four mentions of encryption in GDPR that provide real incentives for organizations to use encryption.
A confluence of factors is putting hundreds of thousands of implementations of Enterprise Resource Planning (ERP) applications at risk of cyber attacks.
Applications contain three specific components where vulnerabilities can be found, and each must be tested in a different way for security testing to be complete.
As you start to get an idea of what your application portfolio looks like, you then need to start determining the specific risks that applications can expose your organization to.
From a security perspective, to create understand application dependencies you need not only to understand the flows and servers, you need to understand the ports and underlying processes.
Today an organization may have thousands of apps on the internet, but having thousands of monolithic security devices just isn’t practical.
Security cannot exist in a vacuum – it must be integrated with the entirety of an organization’s strategy when it comes to securing development operations.
Shadow IT 2.0 is a symptom of a bigger problem – the inability to maintain digital competitive advantage due to the insufficient pace of code deployment.
Savvy organizations have learned how to use a mix of static and dynamic application security testing types to increase their coverage and lower their risk.
- 1 of 9
- ››
SecurityWeek Daily Briefing
- NSA-Linked 'DarkPulsar' Exploit Tool Detailed
- 0-Day in jQuery Plugin Impacts Thousands of Applications
- City Pays $2,000 in Computer Ransomware Attack
- Chinese Hackers Use 'Datper' Trojan in Recent Campaign
- Server With National Guard Personnel Data Target of Attack
- FreeRTOS Vulnerabilities Expose Many Systems to Attacks
- EU Leaders Vow Tough Action on Cyber Attacks
- Mozilla Brings Encrypted SNI to Firefox Nightly
- Remote Code Execution Flaws Patched in Drupal
- Splunk Patches Several Flaws in Enterprise, Light Products
Copyright © 2018 Wired Business Media. All Rights Reserved. Privacy Policy