Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Apple will soon patch a bug in iOS 13 and iPadOS that gives “full access” permissions to third-party keyboard apps without the user’s approval. [Read More]
A threat actor referred to as POISON CARP has targeted senior members of Tibetan groups via WhatsApp for around six months. [Read More]
Cycode, a company that specializes in protecting source code, has emerged from stealth mode with $4.6 million in seed funding. [Read More]
Windows 7 and Windows Server 2008 will officially reach end-of-support on January 14, 2020, but they will continue to receive security patches past that date, unofficially. [Read More]
Cisco Talos has released two new open source tools for IDA Pro: GhIDA, an IDA Pro plugin, and Ghidraaas (Ghidra as a Service), a docker container. [Read More]
DevOps firm CircleCI informed customers that some information that may be useful for targeted phishing attacks was exposed through a third-party analytics vendor. [Read More]
VMware announces significant enhancements, including in security, to its Virtual Cloud Network offering. [Read More]
Achieving a genuine DevSecOps environment is not easy. Speed in code generation (DevOps) is a different requirement to security in code generation, and one can hinder the other. [Read More]
Misconfiguration in JIRA project management software results in thousands of companies’ filters, dashboards and staff data being publicly exposed. [Read More]
Hackers have managed to compromise 62 colleges and universities by exploiting a vulnerability in the Ellucian Banner system. [Read More]
- 1 of 47
- ››
FEATURES, INSIGHTS // Application Security
Every piece of hardware, every integration, every API, every process, as well as applications themselves, are potential targets.
Applications have been deconstructed to the point where we need to think about them with a new level of abstraction to understand how security needs to evolve.
The best way for the security industry to meet the challenge of modern applications and modern app development is to adopt a modern way of supporting those from a security perspective.
ChatOps offers a bridge to a fully realized vision for DevSecOps, offering a much quicker path to resolution for both security and non-security issues.
If done right and integrated throughout the process, security ends up being not a source of friction, but a function that protects the business, at the speed of business.
With a holistic approach you can enable efficient segmentation across your infrastructure, identify anomalies faster by using process behavior deviations, and reduce your attack surface quickly.
This move to container-based development and agile methodologies has been great for innovation and iteration, but it’s also brought a massive shift in the application landscape with real impact on security teams.
As organizations digitize their business and make these shifts, they need to know what and who they can trust.
By paying just a bit more attention to the permissions you are allowing on your phone or computer, you could protect yourself from a much more significant headache down the road.
While GDPR doesn’t require encryption, there are four mentions of encryption in GDPR that provide real incentives for organizations to use encryption.
- 1 of 10
- ››
SecurityWeek Daily Briefing
- Cyberattack on New Orleans City Computers Called 'Minimal'
- Iran Says It's Defused 2nd Cyberattack in Less Than a Week
- Large Hospital System Hit by Ransomware Attack
- Cyberattack, Ransomware Hobbles New Orleans City Government
- Suspected Cyberattack Hobbles New Orleans City Government
- Microsoft Releases Integrated Threat Protection in Public Preview
- Fortinet Acquires SOAR Platform Provider CyberSponse
- Credential Harvesting Campaign Targets Government Procurement Services
- OPSWAT Acquires Network Access Control Provider Impulse
- FireEye Launches New OT Threat Intelligence Service
Copyright © 2019 Wired Business Media. All Rights Reserved. Privacy Policy