Microsoft has issued additional instructions on how to better implement a patch to fix an elevation of privilege vulnerability called Zerologon in Windows Server that affects the Netlogon Remote Protocol. The update comes as Cisco Talos researchers report a spike in attempts to exploit the flaw.
U.S. government agencies are supposed to have patched the "Zerologon" vulnerability by now, about six weeks after Microsoft issued a patch. But CISA warns that too many agencies' systems remain unpatched.
The U.S. Commerce Department is banning the downloading and hosting of China-based social media apps TikTok and WeChat effective on Sunday, citing national security concerns. The announcement comes as Oracle continues to negotiate a deal for partnering on TikTok's U.S. operations.
In the year of accelerated digital transformation, software development is undergoing transition - and so is application security testing. Matt Rose of Checkmarx offers tips to ensure you get the most out of automating your AST solutions.
Independent bug hunters who find flaws in products and services often struggle to hand off their vulnerability report to someone in a position to get it fixed, says longtime security researcher Daniel Cuthbert. He describes steps organizations must take to be able to receive - and act on - bug reports.
While breaches will inevitably lead to "blaming and shaming," smart security professionals want to ensure that they are following security best practices to protect customer data and trade secrets. A good benchmark for this is to enforce "reasonable" security measures.
Download this whitepaper to:
Learn about the...
To insulate themselves against catastrophic data breaches, companies are moving toward modernizing their tech stacks through the refactoring and consolidation of legacy software components.
On top of bolstering data security, modernization also increases agility, shortens app development cycles, and reduces...
In the three years since Equifax suffered a massive data breach, the consumer credit reporting firm says it has worked tirelessly to overhaul the security shortcomings that allowed the breach to happen. Equifax CISO Jamil Farshchi and other security experts weigh in on important lessons learned.
The U.S. Cybersecurity and Infrastructure Security Agency is ordering most executive branch agencies and departments to create vulnerability disclosure programs by March 2021. Some agencies, such as the Pentagon, already have robust programs in place.
Sysdig Secure brings together image scanning, run-time protection and forensics capabilities to identify vulnerabilities, block threats, enforce compliance and audit activity across your microservices.
This white paper describes the potential security concerns associated with the use of containers and provides...
Contact-tracing apps are continuing to take shape around the world as the COVID-19 pandemic continues. Using privacy-by-design principles is critical to building trust in these apps, says privacy expert Ann Cavoukian.
This ESG Technical Review documents ESG's evaluation and analysis of how HCL AppScan can help developers continuously secure applications using policies defined by security specialists. It also evaluates how AppScan can easily be integrated into CI/CD pipelines and support other aspects of DevSecOps initiatives to...
In application security testing, Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) are prominent techniques. However, Interactive Application Security Testing (IAST) is a promising new entrant in AST, helping to dramatically reduce false positives. This white paper provides a...
Developers and DevOps must become more agile, and application delivery controllers (ADCs) can serve as a catalyst for accomplishing this. ADCs allow application delivery services to be spun up and efficiently on demand - and use automation and intuitive user interfaces to open up their management to an array of...
With the growth of the microservice architecture, a new space of containerized application orchestration frameworks has evolved, and Kubernetes (an open-source platform for managing containerized workloads and services and facilitates automating application deployment, scaling and management) is one of its largest...
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing cuinfosecurity.com, you agree to our use of cookies.
