ScarCruft Threat Group Using Malware to Steal Information From Bluetooth Devices
An advanced persistent threat (APT) group known as ScarCruft is now using malware to steal information off of Bluetooth devices.
Securing the Microservices Architecture: Decomposing the Monolith Without Compromising Information Security
Ditching monolith for microservices may be right for your organization, but it's critical to address the relevant security considerations early in the process.
SLUB Backdoor Receives Commands From GitHub and Communicates Through Slack
Security researchers have discovered that the new SLUB backdoor is receiving attack commands from GitHub and relying on Slack for communicating with its attackers.
Wisdom of the Crowd: How the App Store Model Drives Innovation in Data Security
Application developers can accelerate the pace of innovation in data security by making it easy for third parties to integrate with their platforms.
Open Banking and PSD2: Disruption or Confusion?
Open banking promises to make financial services apps more convenient, but there's still a lot of confusion about how financial firms will protect customer data from rogue third parties.
Insecure Apple Authorization API Still Used
An older MacOS API is still being used by many developers, despite risks. While a new API has been released, it isn't considered to be a good replacement.
Application Security Report Calls Out Problems in Mobile, IoT Devices and DevOps
High-Tech Bridge released a report at InfoSecurity Europe 2017 highlighting some of the fastest growing application security threats to developers.
Govern Your API Banking Environment
As the financial services landscape increasingly shifts toward digital solutions, it is more crucial than ever to secure API banking environments.
New Google API Will Securely Verify Chrome Devices
The new Google API allows a network service to obtain a hardware-backed cryptographic guarantee of the identities of a device and the user accessing it.
Re-examining the IBM X-Force Exchange API
The X-Force Exchange API has undergone two significant changes since it went public in April 2015: Anonymous access disappeared and rate limits appeared.