Page 73 - Generation Technologies Secure Development News Today

Dave Ferguson, Principal Solution Architect, Veracode Traditionally, software development training falls short on security. And as enterprises embrace the “shift left” movement, that gap puts them at risk. Veracode’s Dave Ferguson discusses the gap and how Veracode’s new Security Labs was developed to fill it. In an interview with ISMG, Ferguson discusses: Findings from the latest State of Software Security report; Why developer training falls short on security; The new Security Labs i...

Business Development Leader, Network Security, Cisco Abhishek leads the Network Security GTM for EMEAR & APJC region in Global Security Sales organisation, based in Singapore. He is responsible for defining and developing growth strategies for customers & partners, to support positive business outcomes leveraging Cisco Network Security Solutions. Abhishek has built and led sales and solutions architect teams in growth areas of cybersecurity, managed services and outsourcing and he knows how to ...

Get Permission Hackers have targeted units of local government in the U.S. by attempting to exploit unpatched vulnerabilities in Microsoft Exchange email servers, according to a new report by the security firm FireEye. While Microsoft has said that a Chinese-linked hacking group that has been exploiting the vulnerabilities in Exchange is known to target infectious disease researchers, law firms, higher education institutions, defense contractors, policy think tanks and nongovernment organizati...

BankInfoSecurity SecurityEditor) • March 3, 2021     Fortinet’s FortiGuard Labs is out with its latest Global Threat Report, this one reflecting on the second half of 2020. No surprise: After the SolarWinds attack, supply chain security takes center stage. But don’t forget about ransomware and the ongoing attacks on new home branch offices. Highlighted trends from the new Global Threat Report; Why supply chain ...

LinkedIn Four years ago, it was argued that software would replace Tier One Security Analyst roles across the industry. But at Secureworks, we view the infusion of automation into the SOC differently. Kevin Hanes, Secureworks Chief Operations Officer, believes the SOC of the future will bring together the best of data science with intelligent, proactive human input. Learn how an industry leader is utilizing technology not to extinguish the Tier One role, but to ignite a new generation of analy...

Get Permission The U.S. is in danger of falling behind China and Russia in developing artificial intelligence technologies and countering cybersecurity threats that could develop as AI use becomes more widespread, according to a newly released report from the National Security Commission on Artificial Intelligence. The 750-page report offers more than 60 recommendations for how the U.S. could become the world leader in developing and deploying AI technologies as well as how to counter threats ...

Joe Partlow, CTO, ReliaQuest Not only have enterprises accelerated their shift to the cloud in 2020, but they have also leapfrogged into multi-cloud environments. With this transition comes the top challenge: Maintaining appropriate visibility. Joe Partlow, CTO of ReliaQuest discusses how to tackle this challenge. p> In this video interview with Information Security Media Group, Partlow discusses: Why visibility is such a persistent challenge; How the issue can be addressed up front in confi...

LinkedIn Four years ago, it was argued that software would replace Tier One Security Analyst roles across the industry. But at Secureworks, we view the infusion of automation into the SOC differently. Kevin Hanes, Secureworks Chief Operations Officer, believes the SOC of the future will bring together the best of data science with intelligent, proactive human input. Learn how an industry leader is utilizing technology not to extinguish the Tier One role, but to ignite a new generation of analy...

BankInfoSecurity May 5, 2021 Compliance Compliance Twitter Get Permission PayPal has patched a cross-site scripting - or XSS - vulnerability in its currency conversion endpoint that, if exploited, could enable malicious JavaScript injection. The PayPal vulnerability was discovered in February 2020 by a security researcher who goes by the name Cr33pb0y, who was paid $2,900 as part of HackerOnes bug bounty program. Responding in the HackerOne forum, PayPal notes the vulnerability resulted in it...

Joseph Blankenship, vice president, research director, security and risk, Forrester Organizations must adopt a new approach to security automation thats tailor-made to address todays threats, says Joseph Blankenship, a vice president and research director at Forrester. SIEM tools provide SOC analysts with limited contextualized data as well as a disproportionate amount of false positives, he says. So the analysts need to use security analytics and other tools. “One of the things that we ...