Data Protection February 26, 2019

When Combating Emerging Social Media Attacks, Don’t Try to Swim Against the Current

4 min read - The lure of social media is too much to fight against. Instead of pushing back, we need to work with what we've got and do our best to educate employees about potential social media attacks.

Application Security January 7, 2019

The System Development Life Cycle: A Phased Approach to Application Security

7 min read - By completing the phases of the system development life cycle (SDLC), security teams can integrate processes and technologies into the development process and improve application security.

Application Security January 4, 2019

New Year, New Risks: 3 Application Security Resolutions You Should Adopt in 2019

5 min read - To ring in the new year, application security teams should resolve to implement more security into the development process, prioritize consumer trust and pay more attention to false negatives.

Security Services November 1, 2018

How Dimitry Snezhkov Balances the Yin and Yang of Penetration Testing

4 min read - Dimitry Snezhkov didn't touch a computer until he was 18. Now he spends his days penetration testing to uncover security gaps and his nights meditating on the balance of life.

Application Security September 26, 2018

Maximize the Power of Your Open Source Application Security Testing

3 min read - To secure products that use open source components, organizations must first take stock of how much of this code they are using in their products.

Security Services August 21, 2018

Why, When and How Often Should You Pen Test?

3 min read - A pen test can help organizations identify vulnerabilities in their systems and software before threat actors have a chance to exploit them.

Security Services June 13, 2018

Space Rogue: A Security Rebel Turned Pen Tester

4 min read - Two decades ago, Cris Thomas testified before Congress about various cybersecurity issues he uncovered as a white hat hacker. Today, he works as a penetration testing specialist for IBM X-Force Red.

Risk Management May 9, 2018

Risk Acceptance 101: What Happens When Security Needs Go Unfunded?

3 min read - The refusal of top leadership to fund security initiatives often translates to explicit, willful risk acceptance.

Incident Response November 13, 2017

The Ugly Duckling’s Security Testing Transformation

2 min read - Some are wary of the Ugly Duckling due to his advanced hacking abilities, but when it comes to security testing, he's really one of the good guys.

Application Security September 20, 2017

Don’t Sweep Web Application Penetration Testing Under the Rug

3 min read - Although it is one of the most crucial components of any security strategy, web application penetration testing is often neglected.