Application Security
Application Security | News, how-tos, features, reviews, and videos
Hardware, software options emerge for runtime encryption
Hackers are getting better at exploiting encryption gaps that expose plain-text data. New hardware and software runtime encryption solutions aim to close those gaps.
Ripped from the headlines – are your messages secure in these encrypted apps?
In the investigations of Paul Manafort and Michael Cohen, the FBI has retrieved messages from Signal, Telegram and WhatsApp. Seth Hallem explains the weaknesses in these apps and what a good data protection scheme looks like.
X-ray your SaaS apps to reveal hidden security vulnerabilities
Best practices to understand security evaluations what is happening "under the hood" of cloud/SaaS applications.
IT, OT and IoT: existential technology lifecycle management
If you give companies a way to make more money by making it clear that we only buy products that have been tested, approved and include security maintenance plans, those companies will rise to the occasion and work hard to get your...
Cloud functions present new security challenges
Cloud functions, or serverless apps, are small, fast and pop in and out of existence. So, how do you secure them?
When security and privacy overrule convenience
Organizations can enable end-to-end API security with OAuth, OpenID Connect and ABAC.
Cybersecurity outlook: data protection takes center stage
From an ever-increasing uptick in data breaches to the rise of Cybercrime-as-a-Service, data protection will continue to be top of mind for CIOs and their teams through 2018 and beyond.
24 best free security tools
Check out these 24 free, standout software tools that will make your daily security work easier.
24 best free security tools
Check out these 24 free, standout software tools that will make your daily security work easier.
Containers are here. What about container security?
ESG data indicates that cybersecurity pros have problems around the nuances of container technology and implementing container-centric security controls.
Will WebAuthn replace passwords or not?
Or, the password is dead – long live the password.
RSA 2018 conference recap
Memories from the greatest information security show on earth.
Fact vs. fiction: 6 myths about container security
Quell these myths to find default security and secure coding at the heart of well-architected containers.
Researchers warn PGP and S/MIME users of serious vulnerabilities
A professor at Münster University issued a warning on Sunday about serious vulnerabilities in PGP and S/MIME – two widely-used methods for encrypting email – which, if exploited, could reveal plain text communications. The issue also...
The good, the bad & the ugly of using open source code components
Component use in development is here to stay. But so are the vulnerabilities lurking in these code snippets. What do developers think about this? Are they concerned, are they frustrated? What’s their take on this problem? We recently...
How lean development improved software security at Fannie Mae
Continual improvement methodologies strengthen security, shorten dev cycles and help the c-suite see infosec’s value.
Quick take-aways from the RSA Security Conference
Last week's RSA Security Conference had good discussions and industry focus, but there was too much hype -- and there's lots of work ahead.
Negative motivation is not positive engagement
The barrage of fearmongering and FOMO over social media and advertising leads to a vicious cycle of negative engagement that builds anger and frustration that can’t be addressed by buying new products. We can break the cycle through...
Left-shifting enterprise appsec: what we can learn from mobile app developers
Multiple, concurrent innovations in enterprise application development present the opportunity to improve application security by “left-shifting” it to the beginning (and throughout) the dev cycle. Mobile app developers have to a...
Hottest cybersecurity products at RSA 2018
Here's a quick run-down of some of the new products announced at the conference, or shown there for the first time.
Sponsored Links