CIO
JANUARY 5, 2023
Low-code/no-code visual programming tools promise to radically simplify and speed up application development by allowing business users to create new applications using drag and drop interfaces, reducing the workload on hard-to-find professional developers. So there’s a lot in the plus column, but there are reasons to be cautious, too.
CIO
OCTOBER 25, 2023
Identity attacks use social engineering, prompt-bombing, bribing employees for 2FA codes, and session hijacking (among many techniques) to get privileged access. Reconnaissance Uses AD explorer to enumerate users, computers, and groups. Creates decoy users, user groups, and computers in your Active Directory.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
CIO
OCTOBER 16, 2023
Earlier this year, I wrote about the importance of organizations reviewing their password management strategies. According to reports, the hacker groups identified as BlackCat/ALPHV and Scattered Spider are behind these attacks. This vulnerability is not unique to MGM nor Okta; it’s a systemic problem with multi-factor authentication.
Tenable
OCTOBER 27, 2023
A critical authentication bypass vulnerability in F5’s BIG-IP could allow remote, unauthenticated attackers to execute system commands. Analysis CVE-2023-46747 is a critical severity authentication bypass vulnerability in F5 BIG-IP that could allow an unauthenticated attacker to achieve remote code execution (RCE).
Xebia
NOVEMBER 1, 2023
InnerSource can be defined as the application of open-source software development principles within an organization’s internal software development processes. It draws on the valuable lessons learned from open-source projects and adapts them to the context of how companies create software internally. What is InnerSource?
Tenable
SEPTEMBER 11, 2023
Ransomware groups including LockBit and Akira are reportedly exploiting a zero-day vulnerability in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) appliances with VPN functionality enabled. Analysis CVE-2023-20269 is an unauthorized access vulnerability in the remote access VPN feature of the Cisco ASA and FTD software.
CIO
MARCH 20, 2024
Authentication. For overall business application and processes, you could look to Software AG’s webMethods or Oracle’s WebLogic Application Server or other approaches from TIBCO, IBM, Open Text and others. That means due diligence in terms of the systems of record used before an acquisition is made. Password strategies.
Expert insights. Personalized for you.
325 
Let's personalize your content