Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Researchers discover a threat actor setting up a fake Amnesty International website to distribute phony anti-virus software. [Read More]
Mariana Trench is an open-source tool that Facebook's security team has used internally to identify vulnerabilities in Android and Java applications. [Read More]
Akamai adds new capabilities to help customers thwart ransomware attacks by blocking the spread of malware within an already-compromised enterprise. [Read More]
The newly discovered Tomiris backdoor contains technical artifacts that suggest the possibility of common authorship or shared development practices with the group that executed the SolarWinds supply chain compromise. [Read More]
The cybercriminals are demanding $400,000 to be paid in exchange for the decryption key. [Read More]
Security researchers at Kaspersky have spotted signs of the notorious FinSpy surveillance spyware hijacking -- and replacing -- the Windows UEFI bootloader to perform stealthy infections on target machines. [Read More]
Broken Access Control becomes the top category with the most commonly encountered Common Weakness Enumerations (CWEs). [Read More]
This is the 16th documented in-the-wild zero-day exploitation of security defects in Apple’s iOS and macOS platforms so far this year. [Read More]
Cowbell Cyber aims to fill a gap in the cyber-insurance ecosystem with products that continuously monitor customers systems to find weaknesses that can be fixed so that insurance can be offered with greater confidence. [Read More]
Netgear warns that an attacker on the same network as a vulnerable device could intercept and manipulate router traffic to execute code as root. [Read More]
FEATURES, INSIGHTS // Application Security
This move to container-based development and agile methodologies has been great for innovation and iteration, but it’s also brought a massive shift in the application landscape with real impact on security teams.
As organizations digitize their business and make these shifts, they need to know what and who they can trust.
By paying just a bit more attention to the permissions you are allowing on your phone or computer, you could protect yourself from a much more significant headache down the road.
While GDPR doesn’t require encryption, there are four mentions of encryption in GDPR that provide real incentives for organizations to use encryption.
A confluence of factors is putting hundreds of thousands of implementations of Enterprise Resource Planning (ERP) applications at risk of cyber attacks.
Applications contain three specific components where vulnerabilities can be found, and each must be tested in a different way for security testing to be complete.
As you start to get an idea of what your application portfolio looks like, you then need to start determining the specific risks that applications can expose your organization to.
From a security perspective, to create understand application dependencies you need not only to understand the flows and servers, you need to understand the ports and underlying processes.
Today an organization may have thousands of apps on the internet, but having thousands of monolithic security devices just isn’t practical.
Security cannot exist in a vacuum – it must be integrated with the entirety of an organization’s strategy when it comes to securing development operations.
Get the Daily Briefing
- Cyberattack Disrupts Services at Ecuador's Largest Bank
- Twitch Says Hack Impacted 'Small Fraction of Users'
- Russia-Linked TA505 Back at Targeting Financial Institutions
- Nations Vow to Combat Ransomware at US-Led Summit
- Ransomware Hit SCADA Systems at 3 Water Facilities in U.S.
- Researchers Disclose New Side-Channel Attacks Affecting All AMD CPUs
- Deepfence Open Sources Vulnerability Mapping Tool 'ThreatMapper'
- Juniper Networks Patches Over 70 Vulnerabilities
- S Korea Seeks Interpol Notice for Two Cyber Gang Leaders
- VirusTotal Shares Analysis of 80 Million Ransomware Samples
Copyright © 2021 Wired Business Media. All Rights Reserved. Privacy Policy