OWASP

10 Tips for Defending Against the OWASP Top 10

Open-source software is a great way to add proven functionality to your application, but it comes with risks in the form of software vulnerabilities. If you are using open-source components (and with all likelihood you are), it is important to keep track of new vulnerabilities as they are discovered, so you can upgrade to the latest, patched-up version of the software. 

One tool you can use to keep track of open-source vulnerabilities is the list provided by the Open Web Application Security Project (OWASP), which was last updated in 2017. The OWASP Top 10 covers the most critical security risks for web applications.

The following tips should help you protect your software against the OWASP Top 10 vulnerabilities.

cloud protection

Expert Opinion on Avoiding Common Cloud Protection Pitfalls

Running a business these days often means managing a series of online accounts and figures, with a little shipping and perhaps some calling. Of course, this lacks the physical security of physical businesses. Many turn to other monitoring and management packages that can be accessed by clients, while algorithms and other features keep access to where it’s necessary. Cloud security can be tricky and without at least some education in the field, users can make simple mistakes that could ruin businesses.

GDPR

Steps to make your website GDPR Compliant

Does your business continuous traffic from European countries? If your answer is yes then you should be fully aware of Europe’s new data privacy law – GDPR. It will definitely affect you if you don’t know it.

In this article, we are going to discuss everything about what GDPR is, how it is going to affect your approaches of data collection and how to make your site GDPR compliant.

Second Annual Long Island CISO Roundtable

We recently held our second annual CISO roundtable that brought in the attendance of fifteen CISO’s for a candid conversation regarding their concerns, challenges and advice on protecting their organization. Last year’s roundtable showed that Long Island has a security community that’s hungry to learn and grow from each other. This was also evident from the attendance at the first BSides Long Island, which was held in January. It was no surprise that our second roundtable was just as lively and informative as these two events. Throughout the agenda for the night the topics covered ranged from continued challenges, improvement, and future considerations. We’ll briefly touch on a few throughout this blog so the extended community can learn from their wisdom and insights.