Email Alerts
-
Google study backs browser silent auto update feature
A recent study found that manual browser updates resulted in less secure browsers. Experts say software patching needs continued improvements. Mozilla responds. Article
-
Secure software development starts before coding begins
Source code and binary analysis tools both play a role in secure software development, but experts say careful planning, better education and a lot of hard work are even more important. Article
-
Security budget issues to resonate at RSA Conference
Increasing pressure to cut costs coupled with new compliance demands could have CISOs looking for answers at the 2009 RSA Conference. Article
-
Twitter worm attack highlights social network flaws
A worm attack used to promote a rival social network wreaked havoc on Twitter, but also highlighted the importance of finding and repairing Web application flaws. News
-
New model supports secure software coding
In this podcast, secure coding experts Brian Chess and Sammy Migues say their new model is the first software security blueprint based on real world data and observed activities. News
-
Firms improve secure coding practices, OWASP survey finds
Boaz Gelbord, OWASP Security Spending Benchmarks Project Leader, explains the survey results. Also, Ivan Arce of Core Security talks about smartphone threats and penetration testing. News
-
More companies seek third-party Web app code review, survey finds
Companies are taking a closer look at software code to find critical vulnerabilities, according to a new survey conducted by the OWASP foundation. Article
-
Free HP SWFScan tool detects Adobe Flash flaws
SWFScan analyzes Adobe Flash to identify dozens of source code errors. Article
-
Fuzzing tool helps Oracle DBAs defend against SQL injection
A new open source fuzzing tool is available to test PL/SQL applications for security vulnerabilities. The free tool was developed by database security vendor Sentrigo. Article
-
Educators see secure coding training challenges, improvements
University-level secure coding training is improving, but hurdles remain, professors say. Article
Security Management Strategies for the CIO