Application Security & Online Fraud

Article

Snyk Acquires Probely to Strengthen API Security for AI Apps

Michael Novinson • November 12, 2024

By buying DAST provider Probely, Snyk bolsters its platform with advanced API security testing for early SDLC stages. This acquisition aims to help developers identify and reduce vulnerabilities in AI-driven and API-heavy applications. Full integration into Snyk's platform is slated for early 2025.

Article

Socket Accelerates Open-Source Security With $40M Series B

Michael Novinson • October 22, 2024

A $40 million Series B investment will support Socket in rapidly scaling its team and product development. Following a 400% revenue increase, the company plans to build on its success by expanding its application security offerings and enterprise support for more programming languages.

Whitepaper

From Basics to Best Practices: Building a Strong AppSec Program

October 9, 2024

Are you aiming to build a stronger AppSec program but unsure how to effectively involve your developers? Inside you’ll learn how to select the right SAST and SCA tools, foster a security-centric developer culture and address slow tool performance while building a resilient application infrastructure.

Whitepaper

Building a World-Class Security Champions Program

October 9, 2024

Embedding Security Champions within development teams can effectively scale their security efforts in your organization. This decentralized method ensures consistent application of security practices across all projects and teams. Snyk’s latest technical guide outlines 7 steps to establish a successful Security...

►

Article

Closing the Gap: Why ADR Is Crucial for Application Security

Tom Field • August 16, 2024

Jeff Williams, founder and CTO of Contrast Security, introduces ADR, a solution designed to address the visibility gap in security operations by monitoring applications and APIs. He explains how ADR blocks and detects attacks, preventing the exploitation of vulnerabilities.

Webinar

OnDemand | 2024 Phishing Insights: What 11.9 Million User Behaviors Reveal About Your Risk

Perry Carpenter , Joanna Huisman, Senior Vice President of Strategic Insights and Research, KnowBe4 • August 12, 2024

Your secret weapon to combat cyber threats might be just under your nose! Cybercriminals continue to exploit vulnerabilities while upping their game with new and more sinister attack methods. The human firewall is your cybersecurity ace in the hole. But how resilient are your users when it comes to fending off...

Webinar

OnDemand | Everything You Can Do to Fight Social Engineering and Phishing

Roger Grimes • June 24, 2024

Social engineering and phishing are not just IT buzzwords; they are potent threats capable of causing devastating damage to your organization. Bad actors and the technology they use to infiltrate your defenses are evolving at lightning speed. The only way to safeguard your assets and data is to stay ahead of the game...

Webinar

OnDemand | 2023 OT Cybersecurity Year in Review: Lessons Learned from the Frontlines

Marissa Costa, Senior Penetration Tester, Dragos , Jackson Evans-Davies, Director of Professional Services, Dragos , Hussain Virani, Senior Industrial Incident Responder, Dragos , Eddy Wade, Senior Industrial Consultant, Dragos • June 14, 2024

In the dynamic battleground of operational technology (OT) cybersecurity, the frontlines are where the most valuable lessons are learned. Join Dragos' panel of seasoned cybersecurity frontline experts as they draw on firsthand experiences from architecture reviews, incident response, and penetration testing in OT...

►

Article

The Cost of Cybersecurity in Digital Payments Space

Anna Delaney • May 8, 2024

The digital payment landscape is undergoing transformative growth, with cybersecurity at its core. Dharshan Shanthamurthy, CEO at SISA, discussed the urgency of addressing cybersecurity in an industry that is not only lucrative for businesses but also for motivated criminal gangs.

Webinar

OnDemand | Combatting Rogue URL Tricks: How You Can Quickly Identify and Investigate the Latest Phishing Attacks

Roger Grimes • February 7, 2024

Don't click phishy links. Everyone knows that. But are your end users prepared to quickly identify today's tricky tactics being used by bad actors? Probably not. Cybercriminals have moved beyond simple bait and switch domains. They're now employing a variety of advanced social engineering techniques to entice your...

Article

Research Executive Analysis: Fighting Fraud, Financial Crime

Tom Field • January 2, 2024

In late Q4 2023, ISMG conducted a survey that attracted over 100 responses from professionals and provided a unique platform for Fraud, AML, Financial Crime, and Compliance leaders to contribute their insights and to offer a deeper understanding of how AI is shaping the daily battle against fraud.

Whitepaper

Fighting Fraud and Financial Crime: Research Survey Report

December 22, 2023

The continuing battle against fraud and financial crime demands constant adaptation and innovation. Generative AI - Artificial Intelligence - and broader AI technologies have brought both excitement and apprehension to our field, as they hold the promise of revolutionising our approach to fraud prevention while...

Article

OnDemand | The Tools & Technology You Need to Meet Google/Yahoo Email Authentication Requirements

Proofpoint • December 15, 2023

Our email authentication experts will be on hand to provide their insight and a demonstration of how exactly Proofpoint Email Fraud Defense can help identify and close requirement gaps.

Article

Hackers Keep Winning by Gambling on SQL Injection Exploits

Mathew J. Schwartz • December 14, 2023

A recently spotted hacking group with a penchant for using open-source tools has been using a less-than-novel tactic: exploiting SQL injection flaws. So warn researchers who recently detected attacks by the group, which has the codename GambleForce and appears to focus on gambling and retail firms.

►

Article

ISMG Editors: Will Federal Budget Cuts Bite US Security?

Anna Delaney • November 24, 2023

In the latest weekly update, the former federal CISO, Grant Schneider, joins three editors at ISMG to discuss important cybersecurity issues, including advice for the next White House cyber director and liability concerns facing CISOs following SolarWinds and its CISO being accused of fraud.