Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Kelsey Winiarski
Attack Analytics Archives
Imperva and Kong are working together to simplify APIs Imperva is attending Kong's 2022 Summit on September 28 and 29 in San Francisco. Imperva's Summit booth will feature both a recorded and ...
cross-site scripting Archives
Kelsey Winiarski
By Kelsey Winiarski Alert fatigue kills data breach detection efforts Is there anything more frightening than missing a cyber attack? For most organizations, the answer is no. However, for many security teams, it's challenging to tune alerts properly to minimize false positives and still be alerted to potential attacks. Too many security tools, ... Read More
Why Traditional Security Tools Fall Short
As the digital landscape continues to evolve, so do the tactics utilized by bad actors that are seeking to exploit application vulnerabilities. Among the most insidious types of attacks are business logic attacks (BLAs). Unlike known attacks, which can be identified by signatures or patterns, such as SQL injection attacks, BLAs target the core functionality and decision-making processes within an application.
Out with the WAF, in with the WAAP
Advanced attacks call for advanced protection Bad actors are constantly discovering new attack vectors to exploit applications. To meet the threat, organizations need enterprise-level security more now than ever. Traditionally, implementing a Web Application Firewall (WAF) would be enough to secure organizations from most application attacks. As application development becomes more complex, so are attack vectors and WAFs can't keep up.
Attack Analytics Helps You Find the Monsters Under the Bed
Alert fatigue kills data breach detection efforts Is there anything more frightening than missing a cyber attack? For most organizations, the answer is no. However, for many security teams, it's challenging to tune alerts properly to minimize false positives and still be alerted to potential attacks.
At Kong Summit 2022, Imperva Will Demonstrate how to Use Terraform to Onboard Kong-managed Apps and Discover API Endpoints
Imperva and Kong are working together to simplify APIs Imperva is attending Kong's 2022 Summit on September 28 and 29 in San Francisco. Imperva's Summit booth will feature both a recorded and live demo built to showcase how Kong and Imperva seamlessly integrate using Terraform. Imperva, a recognized leader in Web Application and Application Protection (WAAP), and Kong, a leader in API management, are joining forces to simplify API management and security for developers.
"Oops, I insecurely coded again!"
The call is coming from inside the house It's no secret that companies need to be vigilant about application security. However, frequently the source of application vulnerabilities may come as a surprise to security teams. While zero-day exploits are a principal focus of vulnerability mitigation strategies, they are just the tip of the iceberg when it comes to flaws in most application security postures. Companies should also address vulnerabilities created by their own developers.
Why the Search for Best-Of-Breed Tooling is Causing Issues for Security Teams
The growing need to consolidate vendor portfolios The adoption of best-of-breed security solutions has led to unforeseen problems for SOCs. Onboarding a new solution increases complexity; it requires configuration, integration with existing tools, fine-tuning policies, and the ability to create meaningful alerts that can be quickly acted upon. Since most tools can only see one part of an attack, it's difficult to create alerts that tell the whole story.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Kelsey
Contact Kelsey, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack