Topic: software security

SD Times news digest: Windows Desktop App Analytics, IBM and Mendix’s low code partnership, and Alphabet’s Chronicle

Microsoft has announced the release of the Windows Desktop Program. The program is designed to give developers insight into how their desktop apps without having to cobble together a bunch of tools. The new program provides detailed information about how apps are performing, and identifies any bugs or issues that may hurt the user experience. … continue reading

SD Times news digest: BMC’s business automation platform, Loom Systems’ AI playbook and Adobe XD CC updates

BMC has announced new capabilities for its Control-M solution. Control-M is the company’s digital business automation platform. The new platform is designed to enable existing and new customers to build, deploy, and manage their business application workflows faster. “In today’s business environment, speed is the currency of digital business,” said Gur Steif, president, digital business … continue reading

CSCC: 10 steps to ensure security for cloud computing success

The Cloud Standards Customer Council (CSCC) announced version 3 of its Security for Cloud Computing: 10 Steps to Ensure Success. The 10 steps are meant to be a reference guide for organizations to better analyze the security effects of cloud computing on the organization as a whole. According to the CSCC, cloud security risks include … continue reading

SD Times news digest: BlackBerry’s Jarvis, MicroStrategy’s data connectors, and Go support in AWS Lambda

BlackBerry is releasing a new cybersecurity software solution. BlackBerry CEO and Executive Chairman and CEO, John Chen, presented BlackBerry Jarvis in a keynote address at the North American International Automotive Show. Starting off, Jarvis will be marked to the automotive industry, and become applicable to other industry other industry segments such as healthcare, industrial automation, aerospace, and … continue reading

SD Times news digest: Intel’s security pledge, VS Code Java tools, and new Skype encryption

In the aftermath of Google Project Zero’s security exploits, Intel has announced that the company will work closely with their partners with a shared goal of restoring confidence in the security of the customers’ data as quickly as possible. Last week, it was revealed one of the vulnerabilties, Meltdown, was found on Intel processors, and … continue reading

Google creates software protection technique to ward off Spectre bug

As companies scramble to put out patches and fixes for the recent Meltdown and Spectre vulnerabilities, Google has come up with a new technique to help developers mitigate the risks. The company has developed Retpoline, a binary modification technique designed to mitigate risks against Spectre’s branch target injection attack. “‘Retpoline’ sequences are a software construct … continue reading

Hologram announces multi-factor authentication solution for IoT devices

Hologram, a software defined cell network for IoT, has announced a multi-factor authentication solution for connected devices. Multi-factor authentication means that a user needs to confirm their identity in addition to providing a password, such as a passcode sent to their phone. While a majority of the Internet already participates in existing multi-factor authentication, Hologram … continue reading

Major tech companies scramble to put out fixes for Meltdown and Spectre vulnerabilities

Earlier this week it was announced that modern CPUs are suffering from two major vulnerabilities being referred to as Meltdown and Spectre. The vulnerabilities will enable attackers to access sensitive information stored on computers. “Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal data which is currently processed … continue reading

Automating API security testing with a DevSecOps approach

There has been a lot of recent focus of shifting testing left, but a part of that which doesn’t get much attention is API testing. Akshay Aggarwal, CEO of PeachTech and founder and COO of Deja Vu Security, believes that companies can better manage API testing by approaching it in a DevSecOps way. It needs … continue reading

SD Times GitHub Project of the Week: RetDec

Avast has open-sourced its machine code decompiler and analytical tool, RetDec, in a move to help the cybersecurity community fight against malicious software. The tool enables you to study application code without actually having to run the application. “Decompilers can be used in a variety of situations,” wrote the Avast Threat Intelligence Team in a … continue reading

Synopsys acquires Black Duck Software

Synopsys officially announced the acquisition of Black Duck Software this week. The companies first entered into an agreement that would enable Synopsys to acquire Black Duck early last month. According to Synopsys, the acquisition of Black Duck will help provide its customers with visibility into open source software. Black Duck provides automated solutions that detect … continue reading

The importance of OAuth 2.0

“There’s an app for that,” but not all apps are created equal. Users expect there to be an endless amount of applications to make their lives easier, but they forget to take into account what kind of security measures those applications provide. In addition, these applications and services often connect to other applications and services, … continue reading

1 3 4 5 6 7 17
DMCA.com Protection Status