Open-source software has injected fun and excitement into the lives of IT professionals and technology hobbyists alike ... Unsurprisingly, open-source software's lineage is complex ... A single open-source project may have thousands of lines of code from hundreds of authors which can make line-by-line code analysis impractical and may result in vulnerabilities slipping through the cracks ...

It's likely you've heard of the Rat Pack. Decades later, along came the Brat Pack. And today, there's the Threat Pack. While they might not be making headlines on stage or on screen, this dubious group of leaders is making headlines in other ways, most recently as part of the Cloud Security Alliance's Top Threats to Cloud Computing 2024 ...

APIs are vital to the financial sector, enabling seamless interactions and efficient operations. However, recent high-profile breaches highlight the urgent need for stronger API security. Financial institutions, in particular, are prime targets for cybercriminals, due to the sensitive nature of the data they handle. The exposure of such sensitive data through APIs can have severe consequences ...

TechTarget's Enterprise Strategy Group (ESG) recently surveyed 350 IT and cybersecurity professionals and application developers to create a report called Modernizing Application Security to Scale for Cloud-Native Development ... When asked to identify their top challenges for AppSec teams supporting cloud-native dev processes, "understanding developer environments and assets to effectively manage security" was one of the top three responses provided ...

Another RSA Conference has come and gone, but not without imparting the wisdom of its attendees who took part in Traceable AI's second annual survey ... The results from this year's survey portrayed a clear message: organizations are struggling to keep up with the continuously evolving challenges of API security ...

You've probably felt the pressure to deploy faster, scale quicker, and innovate constantly. It's exhilarating, but it can also be terrifying. What if a misconfiguration exposes your entire infrastructure? What if a secret gets leaked in a log file? Despite concerns, container security can actually reduce your attack surface, not expand it, and help lock down your containerized applications without sacrificing the agility that drew you to containers in the first place ...

In Episode 74 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA compare one-off best-in-class tools vs. all-in-one security solutions ...

CISOs are struggling with the need to empower both development and application security (AppSec) teams with the productivity benefits of AI tools while establishing governance to mitigate emerging risks, according to Seven Steps to Safely Use Generative AI in Application Security, a new report ...

In Episode 72 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA to discuss the Microsoft DDoS attack and the CrowdStrike outage ...

In Episode 71 of the Cybersecurity Awesomeness Podcast, Maggie MacAlpine, Director of Cybersecurity Partnerships and Cybersecurity Evangelism at Seceon, joins Chris Steffen and Ken Buckler from EMA to discuss how managed security service providers (MSSPs) can improve their security offerings with the right security solutions ...

Security teams are struggling to keep pace with the risks posed by organizations' dependency on modern applications — the technology that underpins all of today's most used sites, according to Cloudflare's State of Application Security 2024 Report ...

Considering the growing sophistication and frequency of cyberattacks, enterprises must make security a priority when developing new applications. To protect sensitive data and preserve the integrity of corporate operations, it's essential to follow the best practices. This blog discusses the best practices for secure enterprise application development so that your subsequent application development becomes easy, safe, and time effective ...