Este estudio de caso trata sobre una aerolínea que enfrentó dos grandes tipos de ataques en sus aplicaciones web y móviles.
Los atacantes utilizaban credential stuffing, lo que en algunos casos comprometió a casi 1000 cuentas de clientes en tan solo un día.
Descargue este estudio y descubra cómo Shape...
Criminals love to amass and sell vast quantities of user data, but not all data leaks necessarily pose a risk to users. Even so, the ease with which would-be attackers can amass user data is a reminder to organizations to lock down inappropriate access as much as possible.
The 475,000 euro fine levied against Booking.com by Dutch privacy authorities should serve as a "wake-up call" for other companies when it comes to GDPR, some experts say. The company waited more than 20 days to report the breach to officials instead of the 72-hour window required under Europe's privacy law.
Dr. Chenxi Wang, industry thought leader and analyst, examined the Return on Investment that organizations may realize by using Cobalt’s Pen Testing as a Service (PTaaS) platform. This study took a detailed look at the benefits and costs of deploying Cobalt’s services in comparison with using traditional...
It’s time to build security in from the start of the SDLC to better manage,
measure, and address risk, empower development teams, and
guarantee secure software delivery at the speed of DevOps.
While financial service organizations are under constant attack from adversaries, there
are specific steps they can...
Public sector organisations worldwide face a
daunting set of challenges as society adjusts to
the current COVID-19 environment. Whether it is
local government, healthcare, law enforcement,
or blue light responders, organisations across all
disciplines that previously depended on in-person
processes have been...
With millions of sports fans to cater to, DAZN
has secure applications high on its agenda. Security comes from the top (their
c-suite) and rolls down to their software developers who understand the value of
a secure application. Application Security Testing (AST) solutions are imperative to
DAZN, so they deliver...
Are you protected from these common AppSec risks?
A single weak point in a line
of code can create an open
door for attackers.
The cost of an average
breach is $3,920,000.
Nearly 80% of apps contain
at least one critical or high
Attacks targeting the application layer are on the rise.
Standards and legislation provide incomplete security coverage:
61% of applications had at least one Critical and High Issue NOT covered by OWASP Top 10.
This up 12% YOY, from 49% to 61%.
Open source code has blind spots:
Among the top movers in...
Are Your Applications Secure?
Turn on the news today, and you’ll see how hacks and other cyber threats are wreaking havoc on
businesses across the globe. And, while software security is becoming a higher priority, for many
businesses it’s still an afterthought for most - one-quarter of respondents report their...
Automating security has become fundamental to supporting the speed-to-market requirements of modern application development environments. Because these environments vary across teams and organizations, security tooling must be flexible enough to enable the adaptation of security automation based on specific workflows...
E-commerce and fraud - they evolved and grew together in 2020, and it's time for fraud defenses to do the same. Smriti Jaggi of F5 details how to deploy a multi-layered fraud defense without adding extra friction to the process.
Digital innovation is the ultimate source of competitiveness and value creation for almost every type of business. The universal desire for faster innovation demands
efficient reuse of code, which in turn has led to a growing dependence on open source and thirdparty software libraries.
Download this whitepaper...
Over the past 11 years, Veracode has explored the challenges in secure application development against the backdrop of new threats and evolving expectations in the annual State of Software Security report.
Download the 11th report, and learn how developers can continue along their software development journey to...
As users and applications become the risk focal point, there is no hard and fast perimeter security professionals can put a wall around. Consequently, application layers remain insufficiently secured. In fact, application layer attacks are now the most frequent pattern in confirmed breaches.
Download this guide and...