Skip to main content

News & Announcements

Be the first to know all the things: product updates, support announcements, company news, upcoming events, etc.

  • 156 Topics
  • 112 Replies
156 Topics
T
ThreatModeler
published in News & Announcements
Big Data Industry Predictions for 2022

Predictive analytics will drive new, emerging use cases around the next generation of digital applications. The technology will become more immersive and embedded, where predictive analytics capabilities will be blended seamlessly into the systems and applications with which we interact. Predictive analytics will drive use cases in next-gen apps like metaverse applications (convergence of digital and physical worlds, powered by technologies such as IoT, digital twins, AI/ML, and XR) and the next generation of composable applications. – Nelson Petracek, CTO of TIBCORead more…

20
T
2 years ago
T
ThreatModeler
published in News & Announcements
How Third-Party Code Makes App Development a Cybersecurity Risk

For years, cybersecurity-minded organizations have attempted to convince their development teams to bring more security into the application development process. This includes creating modern disciplines such as DevSecOps as a way to build better, more secure code and apps.Read more…

40
T
2 years ago
T
ThreatModeler
published in News & Announcements
Better Cybercrime Metrics Act Signed Into Law

U.S. President Joe Biden has signed the Better Cybercrime Metrics Act, aiming to improve how the federal government tracks, measures, analyzes and prosecutes cybercrime. Endorsed by the National Fraternal Order of Police and several national law enforcement organizations, the act will build a system to track cybercriminal incidents to combat rising cyber and cyber-enabled crimes. ++Better categorization, says Archie Agarwal, Founder and CEO at ThreatModeler, will, in turn, standardize the kinds of threats organizations face: the adversaries that promulgate attacks, as well as the nature and impact of a successful attack. “As the government mandates and recommends more reporting, organizations will have more examples that mirror their own exposure, as well as associated damages and costs. Disclosure, generally, is something that government departments and private industry fear alike. A mandated reporting standard and taxonomy will make it harder for firms to pave over detail and magnitu

30
T
2 years ago
T
ThreatModeler
published in News & Announcements
Shadow Code Remains a High Security Risk

PerimeterX released “Shadow Code: The Hidden Risk to Your Website,” the third annual survey conducted with Osterman Research on the use of Shadow Code in web applications.Third-party scripts and open source libraries are typically used for ad tracking, payments, customer reviews, chatbots, tag management, social media integration or other helper libraries that simplify common functions. However, the unmanaged use of Shadow Code — scripts and libraries often added without approvals or ongoing security validation — introduces hidden risks into an organization, making it challenging to avoid the risk of a data breach, ensure data privacy and comply with various privacy regulations.Read more…

20
T
2 years ago
T
ThreatModeler
published in News & Announcements
OMIGOD! Azure Vulnerabilities Are Being Exploited

No sooner had the Open Management Infrastructure (OMI) software agent silently installed by Microsoft on more than half of all Azure instances been revealed then threat actors were already on the case, exploiting the flaws.“Mirai botnet is exploiting #OMIGOD—they drop a version of Mirai DDoS botnet and then close 5896 (OMI SSL port) from the internet to stop other people exploiting the same box,” Kevin Beaumont, aka GossiTheDog tweeted.Microsoft disclosed the four vulnerabilities during this September’s Patch Tuesday earlier this week.Read More…

30
T
2 years ago
T
ThreatModeler
published in News & Announcements
John Steven Joins ThreatModeler's Advisory BoardNews

John Steven is joining the advisory board of ThreatModeler Software, Inc. Mr. Steven has over two decades of software security experience including notable achievements in threat modeling, cloud security, architectural risk analysis, and security testing. In 2015, he founded Codiscope, a spin-off of Cigital which was acquired by Synopsys. He will be working closely with ThreatModeler’s executive team to help shape and guide the company’s planning and go-to-market strategies.“Threat modeling can frustrate organizations because they’re advised to over-rely on singular tactics, such as data-flow diagramming, and because they implement threat modeling as a point-in-time activity. I encourage organizations to treat threat modeling as a capability, incrementally maturing activity throughout their DevOps lifecycle,” said Mr. Steven. “ThreatModeler is uniquely positioned to help teams facilitate threat modeling capabilities throughout their SDL. from secure design, to security test planning, t

240
T
3 years ago
Terms & ConditionsCookie settings