Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Apple had wanted all iOS apps to use HTTPS by the end of the year, but it has now extended the deadline indefinitely [Read More]
Akamai Technologies announced on Monday that it has acquired bot detection firm Cyberfend for an undisclosed cash sum. [Read More]
Researchers analyzed 44,000 plugins from the official WordPress plugin directory and found vulnerabilities in more than 8,800 of them [Read More]
Algorithms are used for such purposes because they are good at making probabilistic projections based on past data with no human intervention and at machine speed -- but they are not infallible, and have become the basis of fictional Armageddons. [Read More]
SAP on Tuesday released its set of security patches for December 2016, which include 20 Patch Day Security Notes, along with updates for two previously released notes. [Read More]
Researchers find an apparently critical vulnerability in a PwC security tool for SAP systems, but PwC has downplayed the risk [Read More]
Cisco prompted a password reset for the user accounts on its Cisco Professional Careers mobile website after a security researcher discovered a vulnerability in the portal. [Read More]
Potentially Unwanted Programs (PUPs) or Applications: How do you tell the good apps from the bad apps? How do you get that whitelist of good apps that allows you to block everything else? [Read More]
Companies spend big money on bug bounty programs to catch vulnerabilities they could have easily identified and fixed in the development phase [Read More]
Google releases two new tools to help developers prevent XSS attacks using content security policy (CSP) [Read More]
- 1 of 26
- ››
FEATURES, INSIGHTS // Application Security
When security teams can assess brand, financial, strategic risks – they are best able to act as a trusted advisor to DevOps teams as they build and maintain secure systems.
2017 is the year for information security teams to align to the work being done in DevOps – whether you call it DevSecOps or not.
OODA loop is a well established concept often used in security which originated in the military. OODA stands for Observe, Orient, Decide, Act.
Hackers are human. Hopefully that doesn’t surprise you too much. Being human means that they are subject to human tendencies, like taking the path of least resistance.
Aside from tools, there are many types of application security testing that can be used to find vulnerabilities in software. An organization must consider multiple software security testing methods to really manage its risk.
Considering that you can find vendors, startups, and specialists in any of these 28 application security technologies, is it realistic to expect any one person to be a subject matter expert in all of them?
Experienced organizations learn that security is not a drag on performance, but can provide productivity gains by eliminating security vulnerabilities early in the development process.
Built in or bolted on? When have you ever seen “bolted on” as the first choice of anyone in just about any imaginable scenario? Yet for software security, “bolted on” is certainly the norm.
Hackers are creative by nature, so you have to use your imagination to think like one. Once you can see your organization from a hacker’s point-of-view, you will be equipped to defend your organization like a security pro.
When it comes to SaaS applications versus on-premise, there are three characteristics that define the need for a different approach to data governance, risk management and security in the cloud.
- 1 of 8
- ››
Subscribe to SecurityWeek
- No Backdoor, but WhatsApp Can Snoop Encrypted Conversations
- Advantech WebAccess Flaws Allow Access to Sensitive Data
- Attackers Use Office's OLE to Distribute Keylogger
- Rudi Giuliani to Advise Trump on Cyber Security
- Elasticsearch Servers Latest Target of Ransom Attacks
- Serious Flaws Found in Aerospike Database Server
- Mobile Forensics Firm Cellebrite Hacked
- Microsoft Launches Privacy Dashboard
- A Positive Prognosis for Digital Value in the Healthcare Industry
- Shadow Brokers "Retire" Awaiting Offer of 10,000 Bitcoins for Cache of Exploits
Copyright © 2017 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use