Web application attacks are one of the biggest causes of data breaches. However, many organizations are either unwilling or unable to prioritizing application security. Our 2022 Application Security Report sheds some light on why this might be. The Breakdown of the Application Security Report Results This Application Security Report shows one of the biggest causes […]
Read More… from The Breakdown of the Application Security Report Results
Introducing the All New beSECURE Platform The newest version of beSECURE has rolled out. This version is packed with updated and innovative features. This new version strengthens your ability to analyze, prioritize, and simplify vulnerability management. And the best feature, there’s no additional cost. Meet the new features: Get a 5-Minute Guided Tour Take a quick, step-by-step […]
Read More… from The Next Generation Of beSECURE Is Here
Meeting PCI-DSS Compliance Requirements The rules in PCI-DSS compliance are more than just “checking off boxes”. They’re designed to help businesses improve their payment card security structure and assure their customers that the data collected is protected. These rules encompass technology controls, processes, and methodologies for protecting the entire infrastructure dealing with payment cards. This […]
Read More… from The Complete Guide to Application Security for PCI-DSS
PCI-DSS has long been the standard for securing payment card-related information. Meeting this bar was the bare minimum requirement for showing that an organization had sufficient controls to keep this data secure. With changes to PCI-DSS already being released and required by 2024, organizations developing and running applications to collect or process payment card-related data need […]
Read More… from Application Security Tips for PCI-DSS 4.0
By 2024, it’s predicted there’ll be more than 400 million connected vehicles in use around the world. In Automotive Industries magazine, Aviram Jenik discusses the implications for cybersecurity and looks at how rigorous testing and standard protocols can elevate the safety of these fast-evolving vehicles. Originally published in Automotive Industries. Excerpt: “Industry regulators are meeting the rise in […]
Read More… from Automotive Industries Article
What is Black Box Fuzzing and why do you need it? Black box fuzzers attack code vulnerabilities the same way a malicious actor would. Black box fuzzing is a type of dynamic application security testing (DAST) that uses one of the widest ranges of attacks to find unexpected code input errors. The goal is to […]
Read More… from Top 3 Reasons You Need A Black Box Fuzzer
Zero Trust and Vulnerability Management Zero Trust is only as reliable as the systems that provide the controls to operate it. Vulnerabilities in the core infrastructure undercut the design foundation of Zero Trust. For your security controls to work, you must provide a hardened environment. An effective vulnerability management program will discover weaknesses in your […]
Read More… from Vulnerability Management: The Backbone of a Zero Trust Strategy
Terranova Security helps users spot email phishing attempts and other cyberattacks through education and simulation available in 40+ languages MINNEAPOLIS —April 8, 2022—Fortra announced today the acquisition of Terranova Security, a leader in global phishing simulation and security awareness training. Available in more than 40 languages, Terranova Security’s platform and content incorporates gamification techniques to increase […]
Read More… from Fortra Acquires Terranova Security
Fortra Infrastructure Protection brands, Digital Defense and Beyond Security are actively monitoring the disclosure of a security issue affecting a widely used Java Framework called “Spring4Shell” or “SpringShell” which has been assigned CVE-2022-22965. The Spring framework allows Java developers to develop Java applications easily with enterprise-level. A Remote Code Execution (RCE) vulnerability was disclosed in […]
Read More… from VRT Zero-day Security Advisory
Company’s Global Partner Program Provides Comprehensive Lineup of Benefits for Channel Partners MINNEAPOLIS – March 31, 2022 – Fortra, a cybersecurity and automation software provider, today announced that CRN®, a brand of The Channel Company, has awarded the company with a prestigious 5-star rating in its 2022 Partner Program Guide. CRN’s annual Partner Program Guide provides a […]
Read More… from Fortra Receives Prestigious 5-Star Rating in CRN® 2022 Partner Program Guide