CISO May 27, 2021

Security by Design and NIST 800-160, Part 4: Technical Processes From ‘Go’ to Disposal

4 min read - Even if you are not an engineer, NIST 800-160 Volume 1 could help you in your work to understand security by design. It shows what you need to secure your information system. In the other blogs in this series, we’ve summarized…

Application Security April 29, 2014

How to Select the Best Application Security and Risk Management Solution for Your Organization

4 min read - By carefully evaluating vendors against a few key capabilities, you'll be able to make informed decisions about application security and risk management solutions. Decision makers in your organization will be able to choose solutions that reduce security risk, lower the…

Software Vulnerabilities April 10, 2014

How Security Intelligence Helps Reduce the Impact of Heartbleed Vulnerability

4 min read - Discussions about the ramifications of the Heartbleed vulnerability are currently taking the Internet by storm. Learn how a proper application of security intelligence tools can help reduce the cost and impact of these kinds of issues in the enterprise.

Endpoint April 3, 2014

How to Cheat Your MDM: Compliance without a Password

7 min read - In this post, we will describe an unpatched vulnerability (CVE-2014-0900) in earlier releases of Android and how it can be exploited by malicious and lazy users to bypass MDM restrictions.

Application Security March 31, 2014

Implementing Risk-Based Application Security Management at Your Organization

5 min read - AppScan Enterprise 9.0 builds a strategic and customizable application security management framework on top of existing application security processes.

Application Security March 26, 2014

New Vulnerabilities in Firefox for Android: Overtaking Firefox Profiles

8 min read - We have recently discovered a series of vulnerabilities in Firefox for Android that allows a malicious application to leak sensitive information pertaining to the user profile. We developed attacks that first try to determine the random Firefox profile directory name…

CISO March 14, 2014

Mikko Hypponen at TrustyCon: Governments as Malware Authors

3 min read - Mikko Hypponen's "Government as Malware Authors" version at TrustyCon. There is a value for security professionals, researchers and leaders in the community to revive the keynotes and continue the discussion.

Application Security March 12, 2014

Securing Your Mobile Applications Doesn’t Have to Be So Overwhelming

3 min read - Security awareness is definitely growing. Increasingly, organizations understand the need, even the requirement, to protect sensitive mobile application data. But organizations are concerned and frustrated about how they can make their mobile applications more secure – some to the point…

Application Security February 24, 2014

Just When You Thought It Was Safe to Go Mobile, New Security Threats Emerge

5 min read - In order to address the growing market need for improved mobile protection, IBM is announcing two exciting new security solutions to protect web and mobile applications from threats and vulnerabilities, and to help you identify and fix vulnerabilities in mobile…

Intelligence & Analytics February 18, 2014

Searching for Trouble: Finding a Security Breach Just Got a Lot Easier

5 min read - The newest planned addition to the QRadar Security Intelligence Platform promises to be a game changer for understanding how an attack succeeded and the steps required to defeat it. Any member of an IT security team will now be able…