Application Security
Application Security | News, how-tos, features, reviews, and videos
Review: How ShiftLeft catches vulnerabilities during code development
This combination traffic analysis tool and dynamic application security testing tool works with nearly any language and CI system, is very easy to use, and integrates directly into the development process.
RSA 2020: 7 trends and takeaways
Attendance down, costs up, and lots of tech talk
![IDG Tech Spotlight > Containers + Virtualization [ CSO / March 2020 ]](https://images.idgesg.net/images/article/2020/03/tech_spotlight_containers_virtualization_cso_by_felix10870_gettyimages_3x2_2400x1600-100834586-small.3x2.jpg)
How Visa built its own container security solution
The homegrown solution takes advantage of the native capabilities that already exist on container orchestration platforms and is primarily built on top of open-source tools and libraries.
APIs are becoming a major target for credential stuffing attacks
New research shows that attackers use APIs to automate credential stuffing attacks. The financial sector is particularly vulnerable.
12 hottest new cybersecurity startups at RSA 2020
Cybersecurity startup companies use the RSA Conference to make their public debut and showcase their products. These are some of the more interesting startups coming out of stealth.
Cybersecurity spending trends, 2020
Spending is up, but perhaps not in the most needed areas, increased business leader involvement brings new challenges, while vertical industries have different requirements and priorities.
Cybersecurity in 2020: From secure code to defense in depth
CIO, Computerworld, CSO, InfoWorld, and Network World tackle the hot security issues, from prioritizing risk to securing digital transformation.
What is a buffer overflow? And how hackers exploit these vulnerabilities
A buffer overflow or overrun is a memory safety issue where a program does not properly check the boundaries of an allocated fixed-length memory buffer and writes more data than it can hold. This causes data to overflow to adjacent...
Sponsor Podcast in partnership with Veracode
Frequency matters: the case for scanning early and often, part 2
Security debt – which is defined as aging and accumulating flaws in software -- is a lot like credit card debt. You can throw money at the balance, but if you don’t stop spending, you’re never going to actually get out of debt. ...
Sponsor Podcast in partnership with Veracode
Frequency matters: the case for scanning early and often, part 1
The latest Veracode State of Software Security report reveals that scanning early, often, and steadily helps you fix more flaws faster while not contributing to security debt. The report finds 56 percent of software flaws eventually...
Sponsor Podcast in partnership with Veracode
AppSec grows up
AppSec awareness has grown in a decade. In Veracode’s State of Software Security report, Volume one, most of the conversation was around trying to explain and advocate for application security. Today, far less of that is necessary and...
Sponsor Podcast in partnership with Veracode
Security debt across sectors: behind the numbers
According to the latest State of Security Software report from Veracode, the retail industry has the lowest average number of unaddressed security flaws. Government and education have the largest “iceberg“ of security debt lurking...
Sponsor Podcast in partnership with Veracode
Unresolved flaws: security debt grows deeper
The average number of days to fix software flaws was at 59 days in the first Veracode State of Software report from ten years ago. Today, it’s jumped to 171 days in the latest 2019 report. While typical median fix times haven't...
Sponsor Podcast in partnership with Veracode
What’s behind most security debt
Security debt - defined as aging and accumulating flaws in software - is emerging as a significant pain point for organizations across industries. In this first episode of our second season of a Hard Look at Software Security,...
Inspecting TLS-encrypted traffic with mitmproxy
The free, open-source mitmproxy tool makes it easy to inspect TLS-encrypted app and web traffic to see exactly who your phone is talking to.
9 top fuzzing tools: Finding the weirdest application errors
Fuzz testing tools root out odd programming errors that might result in dangerous unexpected application errors that attackers can exploit.
8 common pen testing mistakes and how to avoid them
Penetration testing is vital, but are you doing it right? Here are some common mistakes and advice on how to avoid them.
