Internet-exposed assets reveal industry vulnerability profiles
New analysis from CyCognito of over two million internet-exposed assets, across on-prem, cloud, APIs, and web apps, identifies exploitable assets across several key industries, using techniques that simulate real-world attacker behavior.
Techniques used include black-box pentesting using 90,000+ exploit modules, credential stuffing simulations, data exposure detection, etc. The study also used Dynamic Application Security Testing (DAST) to identify runtime web application vulnerabilities, as well as active vulnerability scanning of internet-facing services to detect CVEs, misconfigurations, and exposed assets.
More testing needed to ensure security of web applications
A new report from CyCognito looks at the challenges faced by cybersecurity professionals in protecting web applications, which have become prime targets for cyberattacks.
Organizations maintain dozens, often hundreds, of custom web apps, developed in-house and by third-party partners. What's more over 60 percent update web applications weekly or more often.
DDoS attacks against web apps and APIs surge
Globally, the average number of DDoS attacks per customer grew by 94 percent in 2023, according to a new report from Radware.
"The technological race between good and bad actors has never been more intense," says Pascal Geenens, Radware's director of threat intelligence. "With advancements like Generative AI, inexperienced threat actors are becoming more proficient and skilled attackers more emboldened. In 2024, look for attack numbers to climb and attack patterns, like the shift in Web DDoS attacks, to continue to evolve."
Web app attacks target security misconfigurations
New research from Barracuda finds that 30 percent of all attacks against web applications target security misconfigurations -- such as coding and implementation errors.
Analysis of incidents detected and mitigated by Barracuda Application Security during December shows 21 percent involved code injection. Though these were more than just SQL injections, generally designed to steal, destroy, or manipulate data.
Google launches new service to eliminate virtual desktops
Google and Cameyo are launching a new service that will help organizations to save money and increase productivity by switching from Windows to ChromeOS devices while maintaining access to their Windows apps.
ChromeOS Virtual App Delivery with Cameyo gives organizations the ability to eliminate costly and insecure virtual desktops while still maintaining access to all of their applications. This is claimed to reduce total cost of ownership by 54 percent compared to virtual desktops, improve security, and deliver a better user experience.
Web application attacks soar as attackers get more professional
The number of malicious web application requests grew 88 percent between 2020 and 2021, with broken access control and injection attacks making up over 75 percent of them.
The latest threat analysis report from Radware shows the most attacked industries were banking and finance, along with SaaS providers, together accounting for more than 28 percent of web application attacks.
OpenSilver picks up where Silverlight leaves off
Let us pause for a moment to remember Microsoft Silverlight. The web application framework and alternative to Flash and Java reaches the end of its support life today.
Whilst it never had the market penetration of the others, Silverlight had a 15-year lifespan and in 2010 the plug-in was on over 53 percent of browsers.
Poor security practice leaves industry open to cyber threats
Despite a marked increase in concerns around malware attacks and third-party risk, only eight percent of organizations with web applications for file uploads have fully implemented the best practices for file upload security.
This is among the findings of the latest Web Application Security Report from critical infrastructure protection specialist OPSWAT.
Translation Service DeepL adds Glossary feature to customize translations
Translation service DeepL just announced the introduction of the new glossary feature on the site to improve translations further.
DeepL was established in 2017 as an alternative to Google Translate, Microsoft Translate and other translation services. The developers promised that translations would be more human-like than those of competing services; several blind tests were conducted by DeepL to confirm the claim.
Colorize your old black and white photos automatically -- for free!
MyHeritage offers a handy online tool called MyHeritage In Color which automatically colorizes old black and white photos in seconds -- and does an amazing job of it.
Users without a paid plan are normally limited to colorizing just 10 photos, but MyHeritage is making the service free, and unlimited, for one month because -- you guessed it -- the coronavirus.
Web applications leave companies vulnerable to breaches
Insecure and outdated web applications are a core source of high-profile data breaches among FT 500 global companies according to new research from web security company High-Tech Bridge.
The study reveals that abandoned, shadow and legacy web applications more or less nullify corporate cybersecurity spending and undermine compliance.
Building a progressive web app: 5 key things to consider
Welcome to the exciting world of Progressive Web Apps. You're likely reading this because you've been converted to the PWA cause: a best-of-both-worlds fusion of website reliability and app functionality. Finally, we have a mobile friendly way to combine the speed and directness of websites (no downloads required) with the functionality of apps, like offline browsing, home screen installation and push notifications.
With brands from Twitter to the Washington Post and Lancôme (more on that later) embracing the possibilities of PWAs, the question is no longer "Should you have a PWA?" but "What are the implications for my business?"
Businesses still struggle with web application quality issues
Software bugs have been a problem since the very earliest days of computing, and as we move towards more data-intensive applications and a more sophisticated and flexible user experience, QA and testing remains as vital as ever.
Development platform company Sencha has released the results of a new survey carried out by Dimensional Research, looking at current attitudes and common experiences surrounding the testing of web applications.
Pay-as-you-go cloud platform offers fast, convenient web design
It's a rare business that doesn't have a website these days, but for smaller companies the process of building a site and keeping it up to date can be costly and time consuming.
Texas-based startup Snaplitics is aiming to fix this with the launch of an affordable tool for creating professional websites and landing pages without having to hire developers.
Babbel free six months ends soon
Been looking to learn a foreign language? Depending on your skills for such things it can be easy or difficult – we're all different. Some people seem to pick them up like a magnet and others struggle. But these days it's easier to at least try. No more classes or books, you can do it right online.
Babbel is one of many online services willing to help you and it has a number of languages available to choose from so you can learn to be bi-lingual.
Recent Headlines
BetaNews, your source for breaking tech news, reviews, and in-depth reporting since 1998.
© 1998-2025 BetaNews, Inc. All Rights Reserved. About Us - Privacy Policy - Cookie Policy - Sitemap.