Critical RCE 0day in Apache Log4j library exploited in the wild (CVE-2021-44228)
A critical zero-day vulnerability in Apache Log4j (CVE-2021-44228), a widely used Java logging library, is being leveraged by attackers in the wild – for now, …
Contrast Security
Contrast Security raises $150M to advance application security
Contrast Security announced that it has closed $150M in a Series E round of funding at a greater than billion-dollar valuation. The oversubscribed round was led by Liberty …
Contrast Security partners with Secure Code Warrior to deliver security training for developers
Contrast Security announced its integration with Secure Code Warrior to deliver just-in-time security contextual micro-learning modules to enhance developers’ skills to …
Secure Code Warrior enhances partner program, extends DevSecOps vendors integrations
At its inaugural Global Partner Virtual Summit, Secure Code Warrior announced significant enhancements to its global partner program, as well as expanded integrations with …
Application security not a priority for financial services institutions
Contrast Security announced the findings of a report based on a comprehensive survey of development, operations, and security professionals and executives at enterprise-level …
Dasera appoints David McCaw as VP of Sales
Dasera announced the appointment of cybersecurity veteran David McCaw to the position of Vice President, Sales. In today’s cloud-first environments, data sprawl is …
New infosec products of the week: March 20, 2020
HYAS Insight: A threat intelligence solution for investigation and attribution HYAS Insight is a threat intelligence and attribution solution that improves visibility and …
Contrast Security simplifies DevSecOps with Route Intelligence
Contrast Security, the next-generation software security platform, announced Route Intelligence, a major new capability for application security. Legacy application security …
Malware and ransomware attack volume down due to more targeted attacks
Cybercriminals are leveraging more evasive methods to target businesses and consumers, a SonicWall report reveals. “Cybercriminals are honing their ability to design, …
Embedding security, the right way
As organizations proceed to move their processes from the physical world into the digital, their risk profile changes, too – and this is not a time to take risks. By not …
Custom code accounts for 93% of application vulnerabilities
Although third-party software libraries represent a majority of an application’s code, they account for less than seven percent of application vulnerabilities. Typically, …