Open source and third party code components introduce an average of 24 vulnerabilities into each web application, exposing firms to a variety of serious threats including denial of service and malware injection, according to Veracode....
INFOSECURITY MAGAZINE
READ MORE
|
Traditional applications continue to introduce risks into the enterprise, and the number of serious vulnerabilities has increased across most sectors, according to WhiteHat Security. The 2018 Application Security Statistics Report: The Evolution of the Secure Software Lifecycle found that in addition to traditional applications, the vulnerabilities in agile development frameworks, micro-services, application programming interfaces (APIs) and cloud architectures also pose security challenges. Whi...
INFOSECURITY MAGAZINE
READ MORE
|
Courts have generally tended to dismiss consumer class-action lawsuits filed against companies that suffer data breaches if victims can't show that the the breach directly caused a financial hit....
COMPUTERWORLD
READ MORE
|
"FireEye has announced the acquisition of threat intelligence provider iSIGHT Partners for $275 million.
With an ambition to create an “advanced and comprehensive cyber-threat intelligence operation”, FireEye said that customers of both companies will benefit from lower business risk through higher fidelity alerts, context to prioritize threats, and strategic insights to proactively prepare for targeted threats."...
WWW.INFOSECURITY-MAGAZINE.COM
READ MORE
|
In an attempt to expedite legislation to secure US election systems, senators have introduced a new version of the Secure Elections Act as an amendment to the National Defense Authorization Act (NDAA). With discussions of the NDAA reportedly on next week's agenda, Sens. James Lankford (R-Olka.) and Amy Klobuchar (D-Minn.) – backed by bipartisan cosponsors – have inserted their legislation as part of the annual defense policy legislation, according to The Hill. In December of last...
INFOSECURITY MAGAZINE
READ MORE
|
A vulnerability in several WiMAX routers, distributed by WiMAX ISPs to subscribers, allows an attacker to change the password of the admin user and gain access to the device, wreaking a range of havoc from there. According to SEC Consult, once an attacker is in, he or she can gain access to the device, access the network behind it and launch further attacks. Bad actors also can add devices into a Mirai-like botnet, alter the DNS servers to carry out banking or ad fraud, or just simply spy on the...
INFOSECURITY MAGAZINE
READ MORE
|