Singapore, January 15, 2019 – Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a leading provider of cyber security solutions globally, today announces it has acquired ForceNock Security Ltd. of Tel Aviv, Israel. Founded in 2017, ForceNock, developed a Web Application and API Protection (WAAP) technology which utilizes machine learning, behavioral and reputation-based security engines. Check Point plans […]
Prediction No. 1: Business Emails with Nasty Surprises, Attached Businesses are quickly becoming cybercriminals’ favoured targets. Over $US12 billion worldwide has been stolen over the past five years due to business email compromise. As the theft of passwords and login details becomes increasingly common in enterprise environments, attackers have grown more confident and motivated, targeting […]
With the rise to popularity of browser-based web applications in providing efficiency and driving collaboration to the office workspace, as well as managing critical workloads in businesses. Web browsers like Google Chrome, FireFox, and many others have been targeted by cyber criminals. A lot of people may not be aware of it but web browsers […]
Singapore, November 13, 2018 – Researchers at Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a leading provider of cyber security solutions globally, and DJI, the world’s leader in civilian drones and aerial imaging technology, today shared details of a potential vulnerability that could have impacted DJI’s infrastructure, if exploited. In a report submitted in accordance […]
SINGAPORE, October 16, 2018 – Synopsys, Inc. (Nasdaq: SNPS) today announced the results of its 2018 survey (https://www.synopsys.com/blogs/software-security/govware-2018-survey/) of 251 IT professionals revealing that customer-facing web applications continue to present the highest security risk to businesses in Asia Pacific (36 percent of the respondents), followed by internal-facing web applications (26 percent) and mobile applications (25 percent). […]
Singapore, October 3, 2018 – Synopsys, Inc. (Nasdaq: SNPS) today released BSIMM9, the latest version of the Building Security In Maturity Model (BSIMM) designed to help organizations plan, execute, and measure their software security initiatives (SSIs). The ninth iteration of BSIMM reflects data collected over a 10-year study of real-world SSIs across 120 firms. BSIMM9 highlights the […]
Slovak based IT security company, ESET, has recently confirmed the existence of a dangerous malware, dubbed LoJax, that infects a targeted computer by re-writing the Unified Extensible Firmware Interface (UEFI) which is located in the motherboard’s flash memory, allowing it to survive even when you wipe/replace your hard disk and re-install your operating system. UEFI […]
We all have “a-ha” moments when that lightbulb above our heads is just too bright to ignore. One came to me when I was in a previous IT operations role. It happened on a day when I had two meetings: first with an endpoint agent team and another with a security operations team. The endpoint […]
Though blockchain-native software is in its infancy, the technology races forward to meet more and more use cases. But the community doesn’t seem to have taken software security principles seriously, as we can see from the recent scan of Ethereum smart contracts that identified 34,200 vulnerable contracts (source: https://www.bleepingcomputer.com/news/cryptocurrency/researchers-find-34-200-vulnerable-ethereum-smart-contracts/). For added perspective, a smart contract […]
Intel confirmed a newly discovered vulnerability affecting all modern Intel CPUs starting from their Sandy Bridge line-up, dubbed Lazy FP State Restore, the vulnerability (CVE-2018-3665). Vendors are now pushing to rush their roll out of security updates in order to fix the flaw and keep their customers protected. The flaw exploits a system performance optimization […]
