Google and Adobe are limiting the ability of Adobe's Flash Player to run multimedia ads, but those actions may not be enough to stop cybercriminals.
Amazon is prohibiting ads using Flash Player for its site, which may be the final straw for organizations concerned about ongoing security risks.
A new XSS vulnerability set for WordPress raises sersious security questions, but it's not the only set of flaws to come to light recently.
Reducing the Application Attack Surface: Breaking Payloads With Runtime Code Stripping and Image Freezing
Collaborative research has recently devised a means to reduce a Windows application's attack surface by removing unused functions from libraries that are loaded dynamically.
Information security has changed drastically in a short amount of time, but defense strategies are not keeping pace with its dynamic nature.
WordPress update 4.2.3 crossed out a critical XSS vulnerability — the latest in a long line of flaws that put websites running the CMS at risk.
Native app StageFright is the newest Android vulnerability to come to light. How can users protect their mobile devices from the onslaught of threats?
When used appropriately, static analysis security testing solutions can be an effective part of a security program, but it shouldn't stand alone.
Many cybercriminals today use social engineering as a means of carrying out attacks. In fact, this method is among the most popular attack types.
The Core Infrastructure Initiative has released a ranking of open-source tools that should help the industry avoid problems in OpenSSL and similar tools.