Achieving Velocity Requires a Modernized Approach to Application Security
Digital transformation initiatives are forcing development teams to make tough decisions between meeting time-to-market needs and mitigating risk. Exacerbating the issue is that developers often lack the knowledge to mitigate the risks...
The top three tactics attackers have been using to break into corporate and government networks are brute-forcing passwords, exploiting unpatched vulnerabilities, and social engineering via malicious emails, says security firm Kaspersky in a roundup of its 2020 incident response investigations.
Apple patched a software vulnerability on Monday that researchers say was used to deliver spyware via its iMessage platform to the mobile phones of activists. But a few changes to iMessage could make it safer overall for individuals at high risk of surveillance, says an Apple security expert.
In the automotive Industry, software quality is paramount and software metrics are an important measure of that quality. However, no single metric can give a definitive measure of the quality of software and automotive suppliers need to agree with their OEM both the metrics they require and the acceptable limits of...
By using the right software development tools, you are able to ensure secure, reliable, and standards-compliant automotive software. Changing standards and best practices along with new and emerging technologies can make selecting the right software development tools a daunting task.
Download this whitepaper to...
Nine months after discover of the attack that targeted SolarWinds and clients of its network monitoring tool, the incident continues to spur investigations into what happened. The SEC is reportedly probing those businesses involved, and lawmakers want answers about the breach of DOJ emails.
Attackers are actively exploiting a flaw in Microsoft Windows for which no patch is yet available. Microsoft has issued workarounds and mitigations designed to block the zero-day attack for the flaw in the MSHTML browsing engine, which is being exploited via malicious Microsoft Office documents.
Researchers have released details of a serious vulnerability in Microsoft's Exchange email server, nicknamed "ProxyToken." The bug, which was patched by Microsoft in April, could be exploited to copy emails from Exchange inboxes.
What makes software security effective? Ultimately, effective software security needs to integrate and automate both accurate testing and remediation into developer workflows, train developers to avoid security flaws, and prove your security posture -- otherwise, you are choosing between speed and risk. This is even...
This edition of the ISMG Security Report features an analysis initiatives unveiled by the Biden administration to enhance supply chain and critical infrastructure security and address the cybersecurity skills gap. Also featured: LockBit 2.0 ransomware rep 'tells all'; misconfigured Microsoft Power Apps.
The Biden administration unveiled a package of supply chain and critical infrastructure security initiatives following a meeting at the White House with tech executives and others. Companies such as Google and Microsoft also promised billions in spending on cybersecurity over the next several years.
Google has removed eight fake crypto-mining apps from its Play Store, but researchers at security firm Trend Micro have flagged 120 other apps on users' phones purporting to also be crypto-mining. Users paid for services the eight apps never delivered.
Competing for customer loyalty in a digital world is hard. To add to this challenge, security teams must defend the business from motivated adversaries who have evolved their tactics to bypass traditional defences and evade detection.
Any business that operates eCommerce applications or manages user accounts of...
Competing for customer loyalty in a digital world is hard. To add to this challenge, security teams must defend the business from motivated adversaries who have evolved their tactics to bypass traditional defences and evade detection.
Any business that operates eCommerce applications or manages user accounts of...
As applications are no longer tied to infrastructure, you need security controls at the workload level that are shared dynamically with security in your network - for real-time, multi-layered protection. Micro-segmentation allows you to isolate critical resources to control access and is an important part of Zero...
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing careersinfosecurity.com, you agree to our use of cookies.
