Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Perimeter

Dark Reading Launches New Tech Center On Application Security

New Dark Reading subsite will offer news, analysis, and commentary on application security issues

This week Dark Reading launches a new feature: the Application Security Tech Center, a subsite of Dark Reading devoted to bringing you more detailed news, insight, and in-depth reporting on the vulnerabilities and threats that affect today's applications, and the tools and practices for defending them.

This new feature is the 15th of our Dark Reading Tech Centers, which are designed to provide you with a more focused view of specific issues, threats, and technologies in the world of IT security. The Tech Centers offer in-depth reports and studies, breaking news, and links to additional articles and information not found on the main Dark Reading site. Just as a traditional newspaper offers in-depth sections or supplements on sports, entertainment, or politics, the Dark Reading Tech Centers provide an additional range of news and information for readers who have an interest in specific aspects of IT security.

While Dark Reading has always covered issues related to application security, we are excited to have a new, focused subsite in which to explore the day-to-day issues that security administrators and applications administrators must wrestle with. For many, enterprises are both the crown jewels -- the tools that make the business run -- and the most frequently targeted asset that attackers go after.

Our additional coverage will explore the ways that attackers target applications, and the latest exploits used to crack them. Just as important, we'll offer more in-depth coverage of how enterprises can build a layered defense to protect their applications -- not just individually, but as an IT discipline.

We'll also look at the application development process -- how security can be baked into new applications, and how you can vet new off-the-shelf applications to ensure they aren't introducing new vulnerabilities into your organization.

Of course, the creation of this new Tech Center doesn't mean our coverage of application security on the main Dark Reading site will decrease. You'll continue to see news and analysis of new application-oriented threats and solutions on our home page and in our opinion section. But when you click on those stories or blogs, you'll be brought here, to the Application Security Tech Center, so that you can see the full range and depth of analysis that we offer on the topic, and gain additional context to support what you're reading.

We think this new Tech Center will help provide more depth and context around your challenges in application security administration. But in the end, this is your site. Please let us know what you think of the Tech Center, our coverage of application security, and what you'd like to see us cover in more depth. We can't guarantee we'll answer every query with a story or in-depth report, but we'll do our best to meet your needs for additional information and analysis.

If it has to do with application security, then you'll find coverage on Dark Reading. And if you don't, let us know -- our goal is to be the most comprehensive source of security news and information on the Web. Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
ReenyS
50%
50%
ReenyS,
User Rank: Apprentice
5/20/2013 | 9:40:22 PM
re: Dark Reading Launches New Tech Center On Application Security
The link to the Application Security Tech Center does not work
Commentary
Ransomware Is Not the Problem
Adam Shostack, Consultant, Entrepreneur, Technologist, Game Designer,  6/9/2021
Edge-DRsplash-11-edge-ask-the-experts
How Can I Test the Security of My Home-Office Employees' Routers?
John Bock, Senior Research Scientist,  6/7/2021
News
New Ransomware Group Claiming Connection to REvil Gang Surfaces
Jai Vijayan, Contributing Writer,  6/10/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-20733
PUBLISHED: 2021-06-22
Improper authorization in handler for custom URL scheme vulnerability in ????????? (asken diet) for Android versions from v.3.0.0 to v.4.2.x allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
CVE-2021-20734
PUBLISHED: 2021-06-22
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
CVE-2021-20735
PUBLISHED: 2021-06-22
Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip number csv bulk registration plugin (3.0 series) 1.0.8 and earlier, and Delivery slip number mail plugin (3.0 series) 1.0.8 and earlier) allows remote attackers to ...
CVE-2021-20736
PUBLISHED: 2021-06-22
NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors.
CVE-2021-20737
PUBLISHED: 2021-06-22
Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via unspecified vectors.