Coinbase agreed to a $100 million settlement with the New York financial regulator on Wednesday over cybersecurity lapses and failure to comply with anti-money laundering guidelines that allowed criminals to use the platform for fraud, money laundering and other illicit activities.
The software risk landscape has changed – and not for the better. Malicious actors constantly evolve their tactics, techniques, and procedures (TTPs) to find new ways of infiltrating or disrupting organizations, and the software supply chain is now firmly in the crosshairs. A surge of sophisticated and diverse...
With rising customer expectations and increasing threats along with fast moving technology, today every company is a technology company - with security, availability, reliability, performance, and scalability their key concerns.
Organizations today need to scale applications and manage more traffic, address...
Today, 83% of internet traffic is made up of API calls, with 83% of enterprise workloads in the cloud. These statistics signal the direction not just some but all businesses must take in order to ensure they can tackle the challenges of today and be prepared for whatever the future may hold.
Meanwhile, as data...
The email attack vector. It may not earn much discussion, but the adversaries take full advantage of it with phishing, BEC and now email platform attacks. Mike Britton, CISO of Abnormal Security, talks about the latest threat trends and how to detect and defend against them.
Apple is advancing plans to allow Europeans to access third-party app stores via their iPhone and iPad, as will soon be required under European law. What this means in practice for its vaunted walled garden security model, and whether most users will bother, remains unclear.
Staying one step ahead of both threat actors and competitors is a tall task for Palo Alto Networks given the breadth of its cybersecurity portfolio. Palo Alto Networks has committed to having best of breed features and functionality in each of the technology categories where it chooses to play.
Ngrok has closed a $50 million Series A round to provide enterprise-grade authentication and user and session observability without adding complexity for developers or users. Ngrok will use the proceeds to support additional authentication protocols and build out integrations and connections.
Snyk hauled in nearly $200 million just weeks after laying off 198 employees but had to slash its valuation by $1.1 billion to seal the deal. The company intends to use the Series G proceeds to enhance and expand its developer security platform through both organic investments and acquisitions.
Approov has landed a new CEO to help the mobile security upstart expand in the United States and capture more healthcare and financial services customers. The Silicon Valley-based company has captured high-profile European customers such as BMW from its development center in Scotland.
The rapidly expanding environment of e-commerce means the attack surface of the retail industry has grown, making it an even more prominent target for cyber criminals. Retailers have millions of customers, whose information and card data have been the target of cybercriminals.
Download this datasheet to learn...
The traditional application development model that puts security checks at the end of the process creates needless friction that slows down organizations, says Snyk solutions engineer Matt Mintzer. Application security specialists need to build tracks rather than guardrails for development, he says.
According to a recent report, 69% of CISOs say the volume of alerts make it difficult to prioritize vulnerabilities. That’s one of the reasons why picking open-source packages to use in your application is a strenuous process. Package ecosystems such as NPM have over a million packages in them, and when you are...
Discover the top ten mistakes to avoid when implementing a secure software supply chain solution. Based on real user experiences with Sonatype Nexus Lifecycle, this approach delivers benefits that include reduced security and licensing risks, as well as improved time-to-market for new applications, resulting in...
Join Immersive Labs Appsec Experts, Mat Rollings and Kev Breen, as they discuss the latest threats and vulnerabilities affecting APIs in web applications.
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing govinfosecurity.com, you agree to our use of cookies.
