Page 75 - Generation Technologies Secure Development News Today

LinkedIn Most applications have vulnerabilities. Our analysis for our annual State of Software Security report this year found that among 130,000 apps, 76 percent had at least one security flaw. In addition, half of security findings are still open 6 months after discovery. Our research also unearthed some surprising - and promising - data surrounding ways to "nurture" the security of your applications, even if the "nature" is less than ideal. During this session, key questions we aim to answe...

Diagram shows how ransomware operators incorporate the SystemBC malware into an attack. (Source: Sophos) Several recent ransomware attacks, including those involving Ryuk and Egregor, have used a commodity malware variant called SystemBC as a backdoor, security firm Sophos reports. First uncovered by security firm Proofpoint in August 2019, SystemBC works as a network proxy for concealed communications and as a remote access Trojan, or RAT, that allows threat actors to deploy additional command...

Co-Founder and CEO, Cloudvisory Lisun Kung, started Cloudvisory 6 years ago to address the challenges associated with multi-cloud security visibility, compliance and governance. With more than 20 years of expertise in security audit, risk management and compliance, Lisun took the challenge to solve the issues associated to multi-cloud security visibility, compliance and governance. As a member of Team FireEye, Lisun is now responsible for leading Cloudvisorys product. Prior to Cloudvisory, Lisu...

Andrew Levine (left), partner, Debevoise & Plimpton LLP; Vincent Walden, managing director, Alvarez and Marsal To improve compliance efforts, organizations can turn to a number of technologies, including data analytics. Vincent Walden, managing director at Alvarez and Marsal, and Andrew Levine, partner, Debevoise & Plimpton LLP, share their views on making the most of automation and integration tools. “The pandemic saw increased use of data analytics for data monitoring by compliance teams,...

LinkedIn From heightened risks to increased regulations, senior leaders at all levels are pressured to improve their organizations risk management capabilities. But no one is showing them how - until now. Learn the fundamentals of developing a risk management program from the man who wrote the book on the topic: Ron Ross, computer scientist for the National Institute of Standards and ...

Malicious domain designed to look like an Office 365 landing page (Source: Abnormal Security) An ongoing phishing campaign designed to harvest Office 365 credentials is using a Microsoft Outlook migration message, according to researchers at Abnormal Security. The phishing emails, which are designed to look as if they come from the IT department of the victims organizations, say the recipient must update to the latest version of Microsoft Outlook, according to the report. When victims click a l...