Application Security
Application Security | News, how-tos, features, reviews, and videos
10 top API security testing tools
Application programming interfaces have become a favorite target for attackers. These tools and platforms (both commercial and open source) will help identify errors, vulnerabilities, and excessive permissions.
Software cybersecurity labels face practical, cost challenges
The federal government wants consumer software to have cybersecurity labels; experts question the feasibility of the mandate.
The case for a SaaS bill of material
A SaaSBOM will provide greater visibility into the components of cloud-based software infrastructure. This proposal shows how to begin to develop one.
18 cybersecurity startups to watch
Security startups are often innovation leaders that attempt to solve critical and persistent problems. These are some of the most interesting ones to watch as they tackle issues around multicloud security, identity management,...
Java deserialization vulnerabilities explained and how to defend against them
Java provides a means to conveniently serialize data to maintain its integrity as it's sent over a network. Attackers can exploit vulnerabilities in the deserialization process if there aren't safeguards in place.
Security blind spots persist as companies cross-breed security with devops
As devops matures into devsecops, cultural obstacles continue to exert drag.
Kubernetes hardening: Drilling down on the NSA/CISA guidance
The new guidance gives a solid foundation for hardening Kubernetes container environments. These are its key components and why they are important.
5 riskiest mobile apps
Unsanctioned applications on corporate mobile devices is a security headache. Here are the five types of apps CISOs never want to find on corporate mobile devices, with strategies for mitigating the risks they pose.
Why code reuse is still a security nightmare
Despite best efforts to track software dependencies, blind spots still exist leading to silent vulnerabilities in software.
The 15 biggest data breaches of the 21st century
Data breaches affecting millions of users are far too common. Here are some of the biggest, baddest breaches in recent memory.
NIST’s EO-mandated software security guidelines could be a game-changer
While experts applaud the new security guidance, it's unclear whether software vendors will completely embrace and implement the needed security practices.
Securing CI/CD pipelines: 6 best practices
Criminals are exploiting vulnerabilities in continuous integration/continuous delivery pipelines to steal sensitive information, mine cryptocurrencies, and deliver malicious code.
Securing infrastructure as code: Perils and best practices
Some organizations are leaving themselves vulnerable when they adopt an infrastructure-as-code approach. Here's how to avoid misconfigurations and insecure templates.
NIST defines "critical software" with a broad range of security functions
The goal is to enable stronger security practices for government-purchased software mandated by President Biden's cybersecurity executive order.
Government-mandated SBOMs to throw light on software supply chain security
The US government will soon require vendors to provide a software bill of materials to help ensure integrity of an application's components.
![Digital bugs amid binary code. [security threats / malware / breach / hack / attack]](https://images.idgesg.net/images/article/2020/09/digital_bugs_amid_binary_code_security_threats_malware_breach_hack_attack_by_whatawin_gettyimages-1188254819_2400x1600-100858616-small.3x2.jpg?auto=webp)
10 old software bugs that took way too long to squash
As these examples show, vulnerabilities can lurk within production code for years or decades—and attacks can come at any time.
6 most common types of software supply chain attacks explained
Not all software supply chain attacks are the same. Here are the methods attackers currently use to corrupt legitimate software through third parties.
Tailor security training to developers to tackle software supply chain risks
Software developers need specialized security awareness training to help them spot supply chain risk and avoid being victimized by attackers.
-
eBook
Sponsored -
White Paper
-
Video/Webcast
Sponsored -
White Paper
-
eBook
Sponsored
