According to Forrester, applications are the leading attack vector for security breaches, with 42% of global security decision makers whose firms
experienced an external attack saying it resulted from an exploited software vulnerability.
As the proliferation of software continues, bringing with it an...
DevSecOps is in its “awkward
teenage years,” says Matthew Rose of
Checkmarx. But with new tooling and
automation - particularly application
security testing tools - he sees the
practice maturing quickly and delivering
improved outcomes.
In an interview with Information Security Media Group’s Tom...
To detect potentially exploitable security vulnerabilities, organizations that create software tend to use solutions such as static, dynamic, and interactive application security testing (AST), to scan their custom and compiled code.
While such solutions are effective at what they are designed for (scanning...
In this eBook, we will hone deeply into one of the industry’s
latest additions to the Application Security Testing (AST)
marketspace, called Interactive Application Security Testing
(IAST).
The reason for this eBook is to bring awareness to
IAST solutions in general, highlighting the following points:...
Public sector organisations worldwide face a
daunting set of challenges as society adjusts to
the current COVID-19 environment. Whether it is
local government, healthcare, law enforcement,
or blue light responders, organisations across all
disciplines that previously depended on in-person
processes have been...
With the advent of CI/CD pipelines, supply chain attacks have become more prevalent – and as the recent SolarWinds breach has demonstrated, the impact of such breaches can be vast and rippling.
This eBook addresses questions raised by security leaders that want to better understand their organization’s...
A centralized log strategy has become an essential component in the administration of today’s complex IT environments.
Since log management data is central to the analysis of securing IT enterprise services, understanding operational
performance of IT infrastructure and applications, and key to meeting data...
As employees connect to servers each morning via VPN to download the valuable corporate data that they need for the day, compliance and security are easily jeopardized. As soon as the employee disconnects from the VPN, corporate oversight goes blind, and compliance can't be maintained.
There are precautions and...
Threat intelligence can be a useful addition to your security toolkit. It
can provide your analysts with information and context they would
not have otherwise. There are many factors to consider, including
where to obtain the intelligence, how to collect it, how to integrate it,
and how much to...
The Ponemon Institute found that today 75 percent of all organizations in the United States are not prepared to respond to an attack. Is yours among them? Maybe.
By leveraging a highly effective combination of human and machine power, SOAR stacks can improve the efficiency of your incident response activities,...
While the Capital One breach may have been
jawdropping in its sheer scale, there are best
practice lessons to be learned in its remediation
response.
What was overlooked in the Capital One
data breach, and why it could have been
much worse;
How to monitor for security events in a
cloud solution;
What steps...
The cybercrime economy is estimated to be worth $1.5 trillion annually, with the number of new security threats soaring at an alarming rate. According to just one report, 7.9 billion records were exposed in the first nine months of 2019. This compounds the burden on already stretched IT teams who are tasked with...
In order to assess technology spending priorities over the next 12-18 months, ESG recently surveyed 664 IT and business professionals representing midmarket (100 to 999 employees) and enterprise-class (1,000 employees or more) organizations in North America and Western Europe. All respondents were personally...
Tanium has been an established player on the North American endpoint protection market for some years, but until recently has had only a limited presence in Europe. That is now changing as the vendor builds out its personnel and partnerships in the region. However, organizational presence is only one part of the...
Digital transformation is a way of life in today’s business world. It touches all corners of the enterprise in ways that were once unimaginable. CIO and IT executives at companies of all sizes and in all industries are quickly coming to realize that most legacy tools and processes are, at best, inefficient and are...
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing databreachtoday.eu, you agree to our use of cookies.
