Managing the hidden risks of shadow APIs

February 1, 2024 at 10:07PM APIs are critical in the digital economy but can pose data security risks due to their proliferation. Shadow APIs and lack of visibility exacerbate these challenges. F5’s solution emphasizes inventory management, discovery, validation, and comprehensive visibility. Utilizing AI and ML, it offers intelligent risk mitigation and assists in unified management … Read more

PoC Exploit Published for Critical Jenkins Vulnerability

January 29, 2024 at 11:12AM It is critical to update to the latest Jenkins versions due to a recently disclosed vulnerability (CVE-2024-23897). The security flaw in Jenkins versions before 2.442 and LTS 2.426.3 allows attackers to read sensitive information and execute arbitrary code. Organizations are urged to update to the patched versions or disable the … Read more

3 Strategic Insights from Cybersecurity Leader Study

December 19, 2023 at 01:21AM The Sapio Research survey commissioned by Trend Micro explores how cybersecurity leaders are addressing industry challenges. Insights include the expanding digital attack surface and the top contributors to cyber risk, the positive results of implementing Zero Trust, DevOps, and XDR strategies, and the move towards a platform-based approach to fight … Read more

Do Small Companies Need Fractional AppSec Teams Akin to vCISOs?

October 24, 2023 at 01:54PM Zatik, a consulting firm founded by Kymberlee Price and Jon Callas, aims to address the lack of application security expertise available to small companies. They provide fractional security consulting services, helping startups and smaller businesses incorporate secure-by-design principles into their software development process. Their goal is to establish a security-focused … Read more

Do Small Companies Need Fractional AppSec Teams Akin to vCISOs?

October 24, 2023 at 01:47PM Secure-by-design software development emphasizes the need to incorporate security considerations from the beginning. Small companies often struggle to access and afford application security expertise, resulting in insecure software. Zatik, a consulting firm founded by Kymberlee Price and Jon Callas, aims to provide fractional security consulting services to help startups and … Read more