Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

12/19/2012
07:03 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

CrowdStrike Partners With Coverity To Ensure Software Security

CrowdStrike has built Coverity into its secure development life cycle

SAN FRANCISCO, December 19, 2012 – Coverity, Inc., the development testing leader, announced today that CrowdStrike, a security start-up focused on protecting enterprises and governments against advanced cyber attacks, has partnered with Coverity to ensure the quality and security of its software.

"As a security company, we know our software will be attacked, and so it is critical that we build security in from the ground up," said George Kurtz, CrowdStrike co-founder and CEO, and former CTO of McAfee. "We partnered with Coverity to ensure that we're only releasing the highest quality code without exploitable security defects that could put our customers at risk."

CrowdStrike has built Coverity into its secure development lifecycle to provide developers with accurate, actionable information on potential security defects and reduce the risk of exploitable vulnerabilities. By fixing security defects during development rather than after the fact, CrowdStrike also lowers development costs and releases code faster, without slowing down the development process.

"More often than not, hackers gain access to a system by exploiting common vulnerabilities--vulnerabilities that could be found much earlier by embracing a development testing technology like Coverity," said Kurtz. "As cybercriminals continue to innovate new methods of attack, it's critical for companies to ensure that the foundation of their business--the software--is secure before its deployed."

"CrowdStrike is on the front lines of security and George is a world-renowned expert on cyber security. The fact that CrowdStrike uses Coverity to secure its own technology validates the critical importance of development testing as part of a company's software security strategy," said Jennifer Johnson, VP of Marketing at Coverity. "Companies can no longer afford to let a simple software defect become the security vulnerability that brings down their systems or leaves them exposed to data theft. We are honored to work with the market leaders in security technology, from innovative start-ups such as CrowdStrike to the world's largest security software companies, as a critical part of their secure development lifecycle."

Online Resources

? Watch a video interview with George Kurtz, CEO of CrowdStrike

? Learn more about development testing

? Learn more about Coverity Security Advisor

? Read the Coverity Security Research Laboratory blog

About Coverity

Coverity, Inc., (www.coverity.com), the development testing leader, is the trusted standard for companies that need to protect their brands and bottom lines from software failures. More than 1,100 Coverity customers use Coverity's development testing suite of products to automatically test source code for software defects that could lead to product crashes, unexpected behavior, security breaches or catastrophic failure. Coverity is a privately held company headquartered in San Francisco. Coverity is funded by Foundation Capital and Benchmark Capital. Follow us on Twitter or check out our blog.

About CrowdStrike

CrowdStrike www.crowdstrike.com is a security technology company focused on helping enterprises and governments protect their most sensitive intellectual property and national security information. Utilizing Big-Data technologies, CrowdStrike is developing a new and innovative approach to solving today's most demanding cyber-security challenges. CrowdStrike's core mission is to fundamentally change how organizations implement and manage security in their environment. Company was co-founded by George Kurtz, former CEO of Foundstone and Worldwide CTO at McAfee, Dmitri Alperovitch, former VP Threat Research at McAfee, and Gregg Marston, former CFO at Networks in Motion and received $26 million in Series A funding from Warburg Pincus.

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/13/2020
Omdia Research Launches Page on Dark Reading
Tim Wilson, Editor in Chief, Dark Reading 7/9/2020
Russian Cyber Gang 'Cosmic Lynx' Focuses on Email Fraud
Kelly Sheridan, Staff Editor, Dark Reading,  7/7/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-14300
PUBLISHED: 2020-07-13
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in th...
CVE-2020-14298
PUBLISHED: 2020-07-13
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the co...
CVE-2020-15050
PUBLISHED: 2020-07-13
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal.
CVE-2020-10987
PUBLISHED: 2020-07-13
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.
CVE-2020-10988
PUBLISHED: 2020-07-13
A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device.