Application Security
Application Security | News, how-tos, features, reviews, and videos
21 best free security tools
Check out these free, standout software tools that will make your daily security work easier, whether it's pen-testing, OSINT, vulnerability assessment, and more.
7 most common ways to fail at DevSecOps
DevSecOps initiatives are fraught with peril and require careful consideration of culture, learning, process and business needs. Here's how companies tend to fail in those areas.
The CSO guide to top security conferences, 2021
Tracking postponements, cancellations, and conferences gone virtual — CSO Online’s calendar of upcoming security conferences makes it easy to find the events that matter the most to you.
4 steps to better security hygiene and posture management
Increasing scale and complexity have made keeping up with security hygiene and posture management cumbersome and error prone, leaving organizations exposed. Here's what leading CISOs are doing to close the gap.
PHP backdoor attempt shows need for better code authenticity verification
Attackers were able to place malicious code in the PHP central code repository by impersonating key developers, forcing changes to the PHP Group's infrastructure.
5 tips for a successful penetration testing program
Proper preparation is key to finding the real weaknesses and vulnerabilities in your network through a pentest. These are the five things you need to do before starting.
New free software signing service aims to strengthen open-source ecosystem
The Linux Foundation's sigstore code-signing software, developed with Google, Red Hat and Purdue University, will help prevent attacks on the software supply chain.
![Tech Spotlight > Cybersecurity [CSO] > Hands cradle an abstract, virtual security matrix.](https://images.idgesg.net/images/article/2021/03/spot_cybersecurity_01_cso_overview_hands_cradle_virtual_security_matrix_by_alexsl_gettyimages-1140974750-100879632-small.3x2.jpg)
Cybersecurity in 2021: Stopping the madness
The challenges are greater than ever. But security pros have learned a lot – and with luck, the right strategic defenses can help even the highest-value targets withstand severe attacks.
Dependency confusion explained: Another risk when using open-source repositories
Dependency confusion is a newly discovered logic flaw in the default way software development tools pull third-party packages from public and private repositories. Here's what you need to know.
Top 7 security mistakes when migrating to cloud-based apps
As organizations rush key apps to the cloud to support remote workers, they often create opportunities for attackers. These are the most common mistakes to avoid.
The 15 biggest data breaches of the 21st century
Data breaches affecting millions of users are far too common. Here are some of the biggest, baddest breaches in recent memory.
Half of all Docker Hub images have at least one critical vulnerability
New research reveals the scale at which criminals have exploited public open-source Docker repositories to plant malware among container images.
How secure are your AI and machine learning projects?
Artificial intelligence and machine learning bring new vulnerabilities along with their benefits. Here's how experts minimized their risk.
14 controls for securing SAP systems in the cloud
Organizations often don't follow security best practices when deploying and managing complex SAP systems. This set of security controls from the Cloud Security Alliance aims to change that.
Half of all virtual appliances have outdated software and serious vulnerabilities
New study shows that even security vendors can use outdated and vulnerable virtual appliances. Top advice: Make sure your vulnerability management processes include virtual appliances.
Silo for Safe Access: A more secure web browser for some use cases
Authentic8's Silo is a sandboxed web browser designed to protect users and systems from malicious code. It can be a more secure option than VPNs or virtual desktops in some cases.
![RIP - grave - tombstone - cemetery - death [Image by Rob van der Meijden - CC0 via Pixabay]](https://images.idgesg.net/images/article/2017/10/grave_tombstone_rip_cemetery_1920_cc0_via_pixabay_by_rob_van_der_meijden-100740483-small.3x2.jpg)
Preparing for Flash and Office 2010 end-of-life
The imminent end of Microsoft's support for Adobe Flash is a good excuse to see what other end-of-life applications running on your Windows network could leave you vulnerable.
What is application security? A process and tools for securing software
Application security is the process of making apps more secure by finding, fixing, and enhancing the security of apps. Checking for security flaws in your applications is essential as threats become more potent and prevalent.
-
White Paper
-
eGuide
Sponsored -
Video/Webcast
Sponsored -
White Paper
-
Video/Webcast
Sponsored
