"application security" news, interviews, and features

News about application security

• Oracle CSO to customers: we don't need your (false positive) bug reports

  Oracle's CSO thinks customers who reverse-engineer its code in attempts to find bugs should cut it out because they're not finding much worth acting on ...

• FinalCode keeps files safe wherever they go

  Startup FinalCode secures files so permissions that protect them follow them around even when they are accessed outside secured networks.

• Apple secures Safari against FREAK attacks

  Apple has patched the FREAK flaw in both OS X and iOS, issuing updates for both operating systems to protect users of its Safari browser.

• Keep calm and plug the holes

  Panicked reactions are no way to cope with zero-day vulnerabilities. We all should know that there's always another one just around the corner.

• Kenneth van Wyk: Why do we keep relearning the same security lessons again and again?

  Two recent vulnerabilities are examples of problems that could have been avoided if we had just applied the lessons already learned in similar contexts.

• Waratek tackles Java application security

  Waratek Java Application Security monitors, detects and blocks risky application behaviors.

Features about application security

• Are your smartphone apps selling you out?

  Just because you're paranoid doesn't mean your mobile apps aren't out to get you

• The true root causes of software security failures

  Developers being overly trusting is one of them

• Unseen, all-out cyber war on the US has begun

  Security pros and government officials warn of a possible cyber 9/11 involving banks, utilities, other companies, or the Internet

• Security Manager's Journal: A reality check for the department's maturity

  An assessment of the information security department shows that it still has a lot of growing up to do.

• Kenneth van Wyk: The good and bad of Android and iOS

  The good and bad of iOS and Android