Infosecurity Opinions

Paint it Black: The Role of Taint Detection in Java Application Security
RASP is changing the negative perception of data tainting as a tool for application security, writes John Matthew Holt

Corporate Cybersecurity: Complacent Parents, Kids In Charge
Security efforts are being hampered by business-immature practitioners and stand-offish management, writes Jason Polancich

Why You Need to Understand your App Exposure
An often-overlooked key to good security, says Sumir Karayi, is understanding your application estate and managing it appropriately

Can Certification Make a Difference to Organizations?
Panagiotis Fiampolis, R&D director at PEOPLECERT, discusses why it is time for organizations to look at certification in cybersecurity

How to Improve Access Security in Healthcare
Data security is a high priority in the healthcare industry, where correct access rights for data are essential, says Dean Wiech

Demystifying Threat Intelligence
‘Threat intelligence’ could be the answer to defeating dangerous cyber-threats. But what does it really mean? asks Adam Schoeman

Go, Slow and No: Bringing DevOps Speed to IT Security
As DevOps speeds make their way into the security cycle, it is likely new security titles will appear

Are Keyless Car Manufacturers Clueless About Disclosure?
Convenience always seems to come at a cost and never more so than with the keyless car.

Security Pros Must Join Forces to Combat the Internet of Evil Things
Vulnerable IoT devices and low-cost, plug-and-play cyber-espionage tools represent an emerging threat vector: the ‘internet of evil things’ (IoET). Dave Porcello argues infosec pros need to better understand this threat and collectively develop a standardized framework and taxonomy to enable IoET information exchange

Superfish: One Step Closer to Sinking our Boat
It is clear that the system of trust established by keys and certificates is under attack

Why CISOs Should Care Who’s Attacking their Firm
Chief information security officers and their teams should collect information on who's attacking their firm, rather than just how, says Jeremy Bergsman

The Cybersecurity Challenges Facing State and Local Governments
IT departments are focused like never before on keeping their networks and data secure, but they face several critical challenges, says Paul Lipman

Smarten Your Data Security or Risk Corporate Loss
It’s never been more important for businesses to strengthen their IT security, amid a growing, sophisticated threat environment and impending EU legislation set to dispense large fines for data protection failures, writes Stuart Hooson

ICO fines and the public sector: something needs to change
Are the fines that the ICO gives out and the 'letters of undertaking' given to the ICO from those responsible for data breaches doing anything at all to combat the problem?

Reducing Cyber-Risk Through Cyber-Insurance
Matt Middleton-Leal weighs up the risk-reduction possibilities offered up by enterprise cyber-insurance

How to Go from Hunted to Hunter
Organizations must act to shift the cybersecurity power balance in their favor, writes Ashish Patel

Professional Sports Teams are Risking a Cybersecurity Own Goal
The world of professional sport faces a significant cyber-threat due to the data teams hold and their high profile, writes James Hampshire

Organizations Need to Break the Reactive Cycle
Today’s businesses face the most dynamic and challenging security landscape ever seen. Traditional approaches are no longer sufficient, writes Rob Lay

Why Did Cybercrime Get So Easy?
The rise in cybercrime can be attributed to the new age of MaaS (malware-as-a-service), says Carl Leonard

Hackers are Powerless with Zero Knowledge
Every day hackers are being equipped for their next attack, as more and more users are trusting organizations with their personal information online. But with zero knowledge, hackers can be rendered powerless, says Steve Watts






















