SQL injection, or SQLi, is one of the least sophisticated web application security attacks that can give an adversary complete control over your web application database. Immortalized by “Little Bobby Drop Tables” in XKCD 327, SQLi was first discovered in 1998, yet continues to plague web applications across the internet. Even the OWASP Top Ten lists injection as the number one threat to ...
Read More »Blog
Fortinet founder sees network security in the bigger picture
When Ken Xie was a student at Stanford University in the early 1990s, the network security world was a different place. Security was based on software firewalls running on personal computers and servers, which Xie capitalized on with his first company — Systems Integration Solutions, Inc. As the computer industry matured, Xie realized that firewalls were not enough, so he founded ...
Read More »Akamai report finds sharp increase in credential abuse
Newly released data that analyzed more than 7.3 trillion bot requests per month found a sharp increase in the threat of credential abuse, with more than 40 percent of login attempts being malicious, according to the Fourth Quarter, 2017 State of the Internet / Security Report released by Akamai Technologies, Inc. According to the Ponemon Institute, credential stuffing attacks can cost businesses ...
Read More »Check Point introduces a new cloud security product family
Check Point Software Technologies Ltd. has announced the CloudGuard product family to protect enterprises from Gen V cyber attacks on cloud applications and infrastructure. The company is also introducing CloudGuard SaaS protecting enterprises against cyber attacks on SaaS applications. CloudGuard is a part of the Check Point Infinity architecture, built on industry-proven and award-winning technologies to provide comprehensive Gen V ...
Read More »Palo Alto Networks unveils cloud security offering
At its recent Epic Cloud Security Event, Palo Alto Networks showcased how it is infusing new cloud capabilities into its Next-Generation Security Platform designed to prevent successful cyberattacks in the cloud. The forthcoming advancements, introduced during the event, will provide customers operating in hybrid and multi-cloud environments with a comprehensive, consistent security offering that integrates directly with cloud infrastructure and workloads. ...
Read More »How security can be aligned to business objectives
A Ponemon Institute report released late last year found that CISOs’ influence within companies is growing as IT security increasingly becomes a priority. However, interviews with senior-level IT security professionals at 184 companies in seven countries, including India and China, showed that security strategy in many organizations is still not yet aligned with business functions. Amid evolving threat vectors, the influence ...
Read More »Orange Cyberdefense, Check Point collaborate to deliver managed mobile security service
Orange Cyberdefense, the Orange Group’s entity that specializes in cybersecurity, and Check Point Software Technologies have teamed up to deliver a new Orange service called Mobile Threat Protection to help multinational enterprises safeguard their mobile device fleets against current and emerging threats. The frequency of mobile attacks is growing – and no-one is immune. Business is carried out more and ...
Read More »Gajshield DLP Firewall
GAJSHIELD DLP Firewall Next Generation DLP Firewall Unique Context Sensitive Network based Data Leak Prevention System with Cloud Security GajShield’s layered security platforms are designed to provide in depth protection against various attacks by tightly integrating key security functions and to securely connect remote offices and partners. GajShield Network Security Appliances combines ICSA Certified Firewall, IPS, VPN, URL Filtering, Virus screening and Bandwidth Management in ...
Read More »Why is Cyber Threat Intelligence Sharing Important?
The ever-accelerating flood of software vulnerabilities and innovative attack techniques leaves increasingly few organizations capable of defending themselves and safeguarding sensitive data in their care. Information-sharing is a critical tool for network defenders because it allows them to avoid the missteps of their peers within the infosecurity community and to deploy proven defensive measures. Proactive information-sharing about attacks and defensive ...
Read More »How do you set up a successful firewall migration?
This may outright stun a few security professionals, but it is (yes, affirmative) possible for migrations to be relatively fast, totally secure and overall mostly painless. Not what you’ve experienced? Also not surprising. Migration projects tend to drag on – and paradoxically, they become the cause of security problems they were only initiated to fix up. This happens for any ...
Read More »