Collaborate Disseminate
A rapidly growing theme for essentially every CISO I’ve been speaking with these days is: how do we get more from our security controls for less spend. Reducing costs is a good thing for any organization at any time: the…
The post Sick of h… Continue reading Sick of high WAF costs? So are we.
The United States Congress ratified the Cybersecurity Framework set forth by the National Institute of Standards and Technology (NIST) in 2014 to standardize the practices and controls that mitigate constantly evolving cyberthreats. The framework has b… Continue reading NIST Recognizes RASP as Critical to Lowering Risk
The post What You Need to Know About the New IAST and RASP Guidelines in NIST 800-53 appeared first on Security Boulevard.
Continue reading What You Need to Know About the New IAST and RASP Guidelines in NIST 800-53
One thing that you learn in the technology space is that change is constant. Companies, solutions, and people who sit on their laurels can find themselves in a position of never-ending catch up. For security operations and application security pro… Continue reading Why You Need Both a WAF and RASP to Protect Your Web Applications
Web interfaces are everywhere. From social media sites to online shopping portals to your CRM, the humble web interface is now used to access much of the online world. So, it isn’t difficult to see why web applications are a prime target for cybe… Continue reading A Web-Driven World Needs Better Web Security
We at Imperva are proud to announce that we now support the .NET Core development platform, securing apps written in .NET Core with our industry-leading RASP solution. Support for .NET Core expands our market-leading, full-stack application security so… Continue reading Imperva RASP Now Supports .NET Core Apps for Security by Default
Zip file overwrites are a cool but rare vulnerability that can occur on apps that work with user-supplied zip files. The folks at Snyk recently found a slew of libraries that do that, and there is a lot of history in this attack vector. In fact, a… Continue reading Pulling Back the Curtain On: Zip File Overwrites
If you set out to build a new WAF today (which, believe it or not, people are still doing), everyone would have some idea of how it would work — you’d setup a reverse proxy, and then use signatures of all kinds on the parameters, headers, body, e… Continue reading Pulling Back the Curtain on RASP
Millions of Verizon FIOS broadband users vulnerable to hackers controlling and surveilling their home networks. Thousands of GPS watches whose maps were open to attackers tracking and eavesdropping on children and elderly users. A zero-day hole in Micr… Continue reading Cloud WAAPs Are the Future of Application Security. But What Does That Mean?
Raiffeisen Italy is the umbrella organization for 40 entities of Raiffeisen Bank in the Italian province of South Tyrol. Overseeing the IT services for these member banks, Raiffeisen Information System CIO Alexander Kiesswetter modernized Raiffeisen I… Continue reading How Raiffeisen Italy Achieved PSD2 Compliance with Mobile Authentication & Mobile App Shielding