Re-Thinking Application Security

Recent reports have shown applications are making it to production with more vulnerabilities than ever, and attacks on web applications have doubled in the most recent year.  It’s really time to change how we think about application security, how we pr… Continue reading Re-Thinking Application Security

Details on the New NIST Requirement for RASP and IAST

If you’re looking for more information on the latest update to the NIST (National Institute of Standards and Technologies) Security and Privacy Framework outlined in SP800-53, there’s a new article just published in the Cutter Business Technology Journ… Continue reading Details on the New NIST Requirement for RASP and IAST

Satisfaction With WAFs at Only 40 Percent

A Ponemon study released in 2019 showed that satisfaction with WAFs (Web Application Firewalls) is at 40 percent, and effectiveness of WAFs rated at only 43 percent.
The post Satisfaction With WAFs at Only 40 Percent appeared first on K2io.
The post Sa… Continue reading Satisfaction With WAFs at Only 40 Percent

What is Web Application Security and Why is it Important?

If you’re new to web application security and you’re looking for a primer to get yourself educated, there’s a recent article published by the EC Council that covers the basics of what web applications are, why web application security is important.
The… Continue reading What is Web Application Security and Why is it Important?

35% of External Attacks Occur Through a Web Application

Back in June of 2020 we wrote about Forrester’s new 2020 State of Application Security report.  Back then we focused on the finding that application vulnerabilities were the weakest link in application security.  In this post, we’ll talk about the find… Continue reading 35% of External Attacks Occur Through a Web Application

Ten Ways to Ensure Web Application Security

Analytics Insight ran a recent article on the “Ten ways to ensure web application security,” a good reminder that there are many steps an organization can take to ensure security for their web applications in the face of larger numbers of attacks and i… Continue reading Ten Ways to Ensure Web Application Security

2021 New Year Resolutions for Web Application Security

As we approach the new year, many of us are hoping for a new normal in 2021, at least something not so crazy as 2020 has been.  Traditionally the new year has also meant a time of reflection, and a time to make resolutions for the new year.  Here at K2… Continue reading 2021 New Year Resolutions for Web Application Security

Fourth Record Year in a Row for Vulnerabilities

On December 15, 2020 we just hit another milestone with the number of vulnerabilities recorded in the US CERT Vulnerability Database (so far in 2020) exceeding the total count in 2019, marking a fourth record year of vulnerabilities discovered in produ… Continue reading Fourth Record Year in a Row for Vulnerabilities

Consumption of Public Cloud is Way Ahead of Ability to Secure It

During the 2020 COVID-19 pandemic, we’ve seen organizations increase their use of the cloud, partly to accommodate the increase in employees working from home, and partly as the increase they had already been planning on in their move to the cloud.  Wh… Continue reading Consumption of Public Cloud is Way Ahead of Ability to Secure It

84% of Companies Have High Risk Vulnerabilities

A recent study from Positive Technologies found that 84% of companies have high risk vulnerabilities that are accessible on the network perimeter.  The results are based on their network perimeter scan of selected corporate information systems, where t… Continue reading 84% of Companies Have High Risk Vulnerabilities