Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Preventing Cross-Site Scripting (XSS) in Java applications with Snyk Code

Java is a powerful backend programming language that can also be used to write HTML pages for web applications. However, developers must know the potential security risks associated with Cross-Site Scripting (XSS) attacks when creating these pages. With the rise of modern templating frameworks, preventing security attacks through proper input validation and encoding techniques has become easier.

What is the Most Secure Way to Store Cryptocurrency?

The best and most secure way to store cryptocurrency private keys, passwords and mnemonic phrases is in a password manager. A password manager encrypts all data, making it a secure option for storing what you need to access your cryptocurrency without it getting into the wrong hands. Read on to learn more about cryptocurrency and what you can do to better protect yours.

Why Ransomware and Business Email Compromise Remain Top Attack Types

The continued increase in cybercrime and breach attempts is not a new trend. For years now, the percentages have ticked upwards, and though cybersecurity has evolved, so have hackers seeking data, money, or infamy. While the initial attack vectors can be myriad — vulnerability exploits, misconfigurations, and credential theft to name a few — there are two tactics that stand tall above the rest: Ransomware and business email compromise (BEC).

How Egnyte Can Help You Search and Preview BIM Files Without Special Software

For architects, engineers, and construction professionals, the ability to quickly locate the latest 3D Building Information Models (BIM) is critical to project progress. However, teams are often hindered by insufficient search capabilities and reliance on specialized software just to download and preview files - inevitably slowing progress.

ScorecardX Integrates with OpenAI's GPT-4

As part of SecurityScorecard’s commitment to making the world a safer place, we are now the first and only security ratings platform to integrate with OpenAI’s GPT-4 system. With this natural language processing capability, cybersecurity leaders can find immediate answers and suggested mitigations for high-priority cyber risks.

Countless Medical Patients Get Exposed in Shields Healthcare Group Data Breach

Shields Healthcare Group is a technologically advanced health service provider that works with independent and large medical providers. The company manages health data, offers online services, and works to help medical providers keep their information secure and organized. This large-scale provider recently experienced a data breach that left them in a dangerous situation that could put countless patients at risk.

Root Cause Analysis for Deployment Failures

Root Cause Analysis (RCA) is a technique used to identify the underlying reasons for a problem, with the aim of trying to prevent it from recurring in the future. It is often used in change management processes to help identify the source of any issues that arise following any modifications to a system or process. RCA is something Tripwire Enterprise is often deeply tied into too.

Cloud security 101: Understanding and defending your cloud infrastructure

Many organizations have either been formed in, or have migrated to cloud-based environments due to the efficiency, flexibility, mobility, cost savings, and other benefits. The majority of applications that are used today are incorporated with the cloud. Most of our data and processes exist in the cloud. But simple as it is, just uploading your files to the cloud or using services of the cloud, doesn`t guarantee that it`s secure.

What Australian Tech and IT Leaders Want to See in Australia's Cybersecurity Strategy

I think we can all agree that the Australian government has demonstrated its will to empower our country, its organisations and citizens to be more secure online. Australia has become a prime target for bad actors, and like my counterparts, I appreciate a government with a hands-on approach—one that recognises the criticality of cybersecurity.