How many ways do U.S. businesses need to be told to lock down their systems to safeguard themselves from ransomware? That's the focus of a new, joint cybersecurity advisory from the U.S. government pertaining to BlackMatter, following an advisory issued last month about Conti.
A newspaper reporter in Missouri who responsibly reported the exposure of Social Security numbers on a state government website has been accused of malicious hacking by the state's governor. The governor alleged the publication of the vulnerability after it was fixed was part of a "political vendetta."
Static application security testing (SAST) plays a major
role in securing the software development lifecycle (SDLC).
Unlike dynamic application security testing (DAST), where
you need the system running to interact with it, SAST
works at the source code level prior to compiling. SAST
can address issues at the...
Security champions bridge the gap between security and development teams. Both of these teams want to deliver secure applications at the speed that the business demands, but traditionally, security practices are added into the SDLC without scaling knowledge and practices through development teams. This creates...
Cloud native applications don’t just run on a different platform; they
overhaul the scope of the applications, the methodologies with
which they’re built, and the skills and ownership around them. To
stay relevant, security practices need to undergo a transformation of
a similar magnitude. We have to embrace a...
The state of the art application security tool needs to combine the power of SAST and
DAST, with a focus on integrating security into the SDLC as early as possible. Additionally, the
tool needs to be developer-first — fast, seamless, contextualized, prioritized — in order to drive
adoption. And finally, it...
As digital business and remote work become the new normal, organizations recognize their increasing
exposures to cyberattacks and the need to refactor their security strategies accordingly. In response to this
new landscape several key factors are influencing the demand for an inhouse Malware Lab,...
In an effort to bolster endpoint protection within the U.S. government, the White House is ordering federal agencies to allow CISA to access existing deployments. It is also setting timelines for improving the protection of workstations, mobile phones and servers.
A congressional letter sent to the heads of four federal agencies expressed an urgent need for the Biden administration to continue combating ransomware. This includes a particular focus on the cryptocurrency infrastructure that is enabling these cyberattacks, four Democratic lawmakers say.
Criminal hackers don't break for lunches, weekends or holidays. Of course, that's just one of many challenges facing information security teams, as they attempt to maximize visibility and minimize complexity while protecting their business around the clock, says Peter Van Lierde, the CISO of energy firm Sibelga.
The number of breach reports filed by U.S. organizations looks set to break records, as breaches tied to phishing, ransomware and supply chain attacks keep surging, the Identity Theft Resource Center warns. It says that there's also been a rise in tardy breach notifications containing little detail.
In the latest weekly update, four editors at Information Security Media Group discuss important cybersecurity issues, including the importance of product security, the impact of ransomware on healthcare sector entities during the pandemic and thinking about cybersecurity awareness creatively.
Applications, in particular Web Applications, have become a top target for threat actors. Organizations have long relied on Web App Firewalls (WAFs) to protect themselves from common threats such as SQL injection, cross-site scripting, and remote file inclusion. In an increasing number of cases, however, protecting...
The gaming industry incorporates user and financial data systems uncommon to other businesses. Personal account information, in-game transactions, and buyer-seller marketplaces utilizing credit cards are common elements of gaming app ecosystems. Players trust that gaming companies are protecting their personal...
The U.S. Department of Justice said this week it will pursue government contractors that fail to report cybersecurity incidents. The department also announced the formation of a Cryptocurrency Enforcement Team to prosecute the misuse of virtual currencies.