Managing an application security program is always a multifaceted endeavor. Whether you’re a small startup or an international enterprise, a successful program involves more than just scanning for vulnerabilities. As IBM Security’s Florin Coada explained in his Think 2019 presentation, managing application risk requires a clear vision on objectives, education…

You’ve just been hired as an architect in an up-and-coming startup. The company has the most brilliant and innovative idea for a smart device that will make you all rich. Your job description is very interesting, and your first mission is to ensure that what the company builds is secure.…

You’ve worked hard to get the right security policies and best practices in place, yet more than half of your employees fail to take even the most basic security precautions in their everyday work. Your organization’s future is at unnecessary risk because senior decision-makers don’t understand the need to pay…

In April 2019, researchers Dmitry Chastuhin and Mathieu Geli presented a talk at the OPCDE Cyber Security Conference about two pieces of exploit code that allow anyone to interact with SAP and perform unauthorized transactions. For example, attackers could use the code to shut down an entire SAP system, execute…