Stephen Gates
Jacksonville
Content Marketing Manager - Checkmarx
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Stephen Gates
Application Security Trends Archives
Report: Massive Number of Internet Exposed Assets Still Lack WAF Protection | | AI in cyberattacks, Application Security Trends, cloud asset vulnerabilities, cloud security risks, Cybersecurity Budget, enterprise asset management, exposure management platform, firewall deployment issues, Global 2000 cybersecurity, IT visibility challenges, PII exposure, security misconfigurations, WAF protection gaps, Web Application Firewall Over half of internet-exposed cloud and non-cloud assets in Global...
Uncovering Hidden Vulnerabilities with NodeZero™
Cloud environments are inherently complex, with each provider offering unique security-focused configurations and approaches. With that comes an array of new types of vulnerabilities. Managing these environments requires specialized knowledge and tools that go beyond the capabilities of traditional security solutions.
Mastering Cloud Security: Uncovering Hidden Vulnerabilities with NodeZero™ – Horizon3.ai
Fireside Chat: Horizon3.ai and Komori Jul 18, 2024 Komori America’s Director of IT, Andy Katz, joins Horizon3.ai’s Principal Security SME, Stephen Gates, to discuss how Andy’s adaptation of IT technology has dramatically changed over time, the greatest cyber threats to Komori and his firsthand experiences, and why Komori selected #NodeZero to help secure their environments, including some of Andy’s initial observations.
Horizon3.ai's Rapid Response Service in Action
A key consideration in cybersecurity is determining whether a known software vulnerability is actually exploitable. This often depends on how and where the at-risk software is deployed in your environment. To address the need to find what's exploitable, Horizon3.ai developed and recently unveiled its Rapid Response service. This service provides our customers with proactive notifications about potentially exploitable vulnerabilities existing in their environments.
Ensuring Cybersecurity: Horizon3.ai's Rapid Response Service in Action – Horizon3.ai
A key consideration in cybersecurity is determining whether a known software vulnerability is actually exploitable. This often depends on how and where the at-risk software is deployed in your environment. To address the need to find what’s exploitable, Horizon3.ai developed and recently unveiled its Rapid Response service. This service provides our customers with proactive notifications about potentially exploitable vulnerabilities existing in their environments.
secure coding practices Archives
By Wajahat Raja,Sue Poremba,George V. Hulme,Checkmarx Security Research Team,Stephen Gates,Dana Raveh,João Morais As per recent reports, cybersecurity experts uncovered a troubling development on the Python Package Index (PyPI) - a platform used widely by developers to find and distribute Python packages. A malicious package ...
Integrating Autonomous Penetration Testing
Revolutionizing Cybersecurity with NodeZero™ for Comprehensive Risk Assessment and Prioritization Traditional vulnerability scanning tools have been essential for identifying systems running software with known vulnerabilities. These tools form the foundation of many Vulnerability Management (VM) programs and have long been used to conduct vulnerability assessments.
Enhancing Vulnerability Management: Integrating Autonomous Penetration Testing – Horizon3.ai
by | Jun 17, 2024 | Blogs, Industry Insights Revolutionizing Cybersecurity with NodeZero™ for Comprehensive Risk Assessment and Prioritization Traditional vulnerability scanning tools have been essential for identifying systems running software with known vulnerabilities. These tools form the foundation of many Vulnerability Management (VM) programs and have long been used to conduct vulnerability assessments.
Enterprise Leadership Archives
In an increasingly interconnected world, where digital technologies infiltrate every aspect of society, vulnerabilities in these systems can be exploited by malicious actors to disrupt emergency services, compromise sensitive information, or even ...
Offensive Awakening: The 2024 Shift from Defensive to Proactive Security
Adversarial Cyber Exercises Are The New Mandate By Stephen Gates, Principal SME, Horizon3.ai After observing the cyber threat landscape in 2023, in the coming year we’re going to see a complete mind shift throughout enterprises and government entities worldwide. The trend forcing this change in thinking is the result of the massive number of successfully breached and subsequently extorted organizations who either paid their ransoms or watched their operations come to a halt last year.
Testing for Exploitability of Palo Alto Networks CVE-2024-3400
On April 12 (and then updated again on April 20), Palo Alto Networks released an advisory about a vulnerability in the PAN-OS® software that runs Palo Alto Networks® Next-Generation Firewalls (NGFWs).
Horizon3.ai
by James Horseman | Mar 21, 2024 | Attack Blogs Introduction In a recent PSIRT, Fortinet acknowledged CVE-2023-48788 – a SQL injection in FortiClient EMS that can lead to remote code execution. FortiClient EMS is an endpoint management solution for enterprises that provides a central location for...
common vulnerabilities and exposures Archives
By Nathan Eddy,Stephen Gates Most people in our industry know what the acronym CVE means. For those that may not, CVE stands for Common Vulnerabilities and Exposures. According to their website, CVE was launched in 1999 ...
Podcast: Sentricon Standalone Success - Cook's Pest Control
In the following podcast, hear from Stephen Gates, vice president of technical services at Cook's Pest Control, and Brandon Crain, Sentricon territory manager. Gates shares Cook's history using the Sentricon system, including how using Sentricon exclusively for its termite control has enabled Cook’s to provide better protection to customer homes, resulting in a significant drop in damage claims and making technician training easier.
Injection Attacks Archives
By Riddika Grover,Michael Vizard,Stephen Gates Injection vulnerabilities are one of the oldest exploitable software defects, which unfortunately are still prevalent today. Doing a simple search on cve.mitre.org com for the term injection returns with over 10,852 injection-related ...
But Is It Enough?
In early 2023, CISA launched their Ransomware Vulnerability Awareness Pilot ( RVWP). It's designed to warn critical infrastructure (CI) entities that their systems have exposed vulnerabilities that may be exploited by ransomware threat actors. The plan is to identify affected systems that may be prevalent in CI networks, then notify operators about potential risk of exploitation.
CISA to establish office to tackle supply chain security issues - Unique Insight – Global Security Mag Online
The U.S. Federal authorities are establishing an office to tackle supply chain security issues and help the industry and partners put updated federal guidance and policies into practice.
#design #leadership #opentowork
It's been over 5 months since the initial announcement that I was laid off. Over that time, I've applied to 150+ positions, had initial interviews with 70+ companies, in-depth interviews with 30+ companies, was ghosted by 20+ companies, and gotten 3 offers (all of which I declined for various reasons). After making such a huge splash with my initial announcement, I have to be honest that I never thought I would be here 5 months later and not be a part of a new in-house team.
Organisations worldwide must modernise through software
By Stephen Gates (pictured) Security Evangelist at Checkmarx The Technology Modernisation Fund has announced over $26 million for three projects focusing on improving user experience, integrating systems and reducing cyber risks for AmeriCorps, the U.S. Agency for International Development (USAID) and the Labour Department in its latest set of awards announced yesterday.
Expert Comment: Technology Modernisation Fund (TMF) announces $26 mill
August 2022 by Stephen Gates, Security Evangelist at Checkmarx The Technology Modernisation Fund announced over $26 million for three projects today focusing on improving user experience, integrating systems and reducing cyber risks for AmeriCorps, the U.S. Agency for International Development (USAID) and the Labour Department in its latest set of awards announced yesterday.
StephenGates.com Journal
This journal is a selection of my own Tweets, articles from my blog and the Tweets of some of the more creative people I have worked with over the years.If y... by Stephen Gates
Dismantling White Supremacy in Design by Antionette Carroll on Apple Podcasts
48 min The fourth of the #ShareTheMicNow episodes was created by Antionette Carroll in conversation with David Clifford and Timothy Bardlavens on Dismantling White Supremacy in Design. 48 min
Stephen Gates - In Visible Talks - A Design Conference
Global Design Leader & Host of The Crazy One podcast Stephen Gates Stephen is a global design leader who specializes in building world-class organizations that integrate human-centered design to drive product and service innovation. He is the Head Design Evangelist at InVision where he works as a strategic partner to elevate the business impact of design through education, coaching, and thought leadership with some of the world’s biggest brands.
Security Boulevard
When it comes to IT security initiatives, many enterprises struggle to quantify business value and return on investment (ROI), often viewing their security spend solely as an insurance expense – a must-have in today’s world of compliance regulations and inevitable cyberattacks. But by implementing the right solutions, organizations can mitigate a multitude of security challenges while enabling business agility and achieving measurable operational benefits.
Security Boulevard
To say that 2020 was an unusual year would be an understatement. Business, government, healthcare, and education drastically changed with many organizations making massive digital transformations that were completely unplanned in many cases. The modifications nearly every organizations had to make were primarily driven by events outside of anyone’s control. However, their success in this transformation in many cases were beyond just notable, they were remarkable.
Four steps to bolster e-commerce software security this holiday season
This year’s holiday shopping season is much different compared to years’ past, with consumers making the vast majority of their purchases online. Black Friday proved this trend, with consumers spending $9 billion on U.S. retail websites, a 22% increase over the previous record of $7.4 billion set on Black Friday 2019.
Security Boulevard
As federal agencies develop more online services and systems to meet the mission of the U.S. government, their appetite and need to develop and deploy secure software applications rapidly continues to grow.
’The Future is Creative’ keynote from HOW Design Live 2019 on Apple Podcasts
55 min This episode is a replay of my main stage keynote from HOW Design Live 2019. This talk is a culmination of everything I have seen and learned over the past year and a half working at InVision. It is made up of three truths that I think affect all of us and the six things we need to work on in our companies and in our work and lives. 55 min
How to outsmart the broken recruiting system on Apple Podcasts
37 min A look at all of the problems that arise during a job hunt and look at how we can use some new thinking and approaches to short circuit these problems and get some better results. 37 min
How to outsmart the broken recruiting system on Apple Podcasts
37 min A look at all of the problems that arise during a job hunt and look at how we can use some new thinking and approaches to short circuit these problems and get some better results. 37 min
Security Boulevard
Today’s cybersecurity and software development students spend years in the classroom honing their skills for gainful employment once they graduate. They’re being equipped with deep knowledge of application vulnerabilities, real-world attack scenarios, and extensive software development expertise that includes secure coding practices. The many students the universities are educating today are being better equipped than ever before.
Guest View: 3 reasons to get going with Go lang
Whether due to corporate project demands or out of pure curiosity, developers are often faced with learning new programming languages. While this can present challenges, especially when it comes to maintaining secure coding best practices, it also opens the door for developers to become accustomed to new, and increasingly better, languages. One language in particular that has quickly become a rising star in today’s software development community is Go, an open-source language developed by Google.
Security Boulevard
This past March, the National Institute of Standards and Technology (NIST) released the NIST Special Publication 800-53, Revision 5, which was their final public draft revision.
Security Boulevard
When beginning to utilize any new programming language, a frequent obstacle developers face is the sheer lack of secure coding education and training about common pitfalls and coding errors during the language-learning process. The subject of security is often neglected by many articles pertaining to a new language, or security discussions are very scattered throughout the many posts found online.
Security Boulevard
The automotive industry is experiencing radical change—and software is the catalyst. Progressively more software, increasingly intelligent components, and new methods of interaction are finding their way into automobiles of all sizes and price. Software empowering the latest features has become a critical differentiator in this industry, beyond improving road safety, convenience, and fuel efficiency for drivers.
The Crazy One: Ep 102 #ShareTheMicNow: Sylvia Baffour
27 min The second of the #ShareTheMicNow episodes was created by Sylvia Baffour on how to approach the work around us, emotional intelligence, and being aware of the emotional after taste your leave with the people around you. 27 min
Security Boulevard
Most organizations who are in the process of transitioning to DevOps understand that this new software development methodology is really about a change of corporate mindset, improvements to internal practices, and the usage of development tools that increase an organization’s ability to deliver software at higher rates. DevOps enables organizations to provide timely software solutions to their customers and compete more effectively in the market in which they operate.
Security Boulevard
Recently, I had an opportunity to sit down with Kurt Risley and ask him about his experiences and observations when working with organizations who desire to develop a comprehensive AppSec Awareness Program. The Q&A is as follows: Stephen: Since our world relies heavily on software, today more than ever before, software must equal security. In this context, what are your thoughts on the origin of software vulnerabilities?
Rejecting your life's invisible scripts on Apple Podcasts
43 min We are often influenced, if not even controlled, by the things we think we need to do and the person we think we need to be in our lives and careers. Chasing and repeating these broken narratives is exhausting, and any deviation from them is met with... 43 min
Security Boulevard
As the world duly salutes our front-line medical professionals, first responders, military and police, factory workers, delivery drivers, construction teams, repair technicians, store clerks, farmers, truckers, pharmacists, cooks, and millions of other people who continue to put themselves front and center of today’s conditions brought on by COVID-19, we cannot forget the others who are working tirelessly to ensure all the technology required to maintain some sense of normalcy is working as...
Security Boulevard
In an industry full of acronyms and buzz words, the term “shift left” surfaced as a result of organizations waiting to perform software security testing until the end of the development process. The problem here is that the industry still tends to think of developing, testing, and delivering software as if someone was reading a book in English, from left to right.
How I'm finding hope in these difficult times. on Apple Podcasts
18 min A few insights and perspectives that I've been sharing with friends, co-workers, leaders and other creatives to try and help in these unprecedented times. I hope it helps. 18 min
Security Boulevard
There’s no denying that today’s digital ecosystem must be protected. But preventing increasingly frequent and severe attacks, which often target customer data and confidential information, requires more out of your organization’s security policies.
Preoperative glenoid considerations for shoulder arthroplasty: a review
Introduction Thorough understanding of the impact of glenohumeral joint pathology on glenoid morphology is important in the predictability of implant survivorship and outcome following total shoulder arthroplasty. Preoperative radiographic evaluation of the glenoid has become pivotal in terms of proper surgical planning, implant choice, methods to correct deformity, and surgical technique.
Security Boulevard
The recent industry shift towards DevOps makes it clear that organizations are adopting this development and operational model to facilitate the practice of automating software delivery and deployment. As a result, organizations are acknowledging that their traditional approaches to software security are having a difficult time adapting to this new model, since security if often viewed as an inhibitor to DevOps.
A Beginner's Tutorial to Rockwell Automation's Studio 5000 Logix Designer
By Stephen Gates, Owner, myPLCtraining.com When it comes to industrial automation, Studio 5000 is one of the most widely used software packages in the world. Studio 5000 Logix Designer (formerly known as RSlogix 5000) is used to program the most powerful Allen-Bradley PLCs (technically PACs), including the ControlLogix and CompactLogix controllers. In my career, I specialize in helping people become confident PLC programmers so they can advance their career or just get better at their job.
2019 – Checkmarx Research Roundup - Security Boulevard
Discovering vulnerabilities like the ones mentioned below is why the Checkmarx Security Research team performs investigations. This type of research activity is part of their ongoing efforts to drive the necessary changes in software security practices among vendors that manufacture consumer-based technologies, while bringing more security awareness amid the consumers who purchase and use them.
2020 Cybersecurity Predictions – Our Experts Weigh In - Security Boulevard
2019 proved to be a hectic year in the cybersecurity landscape. With 3,813 data breaches occurring in the first six months alone, (exposing over 4.1 billion records,) and 12174 new vulnerabilities discovered in commercial and open source software, this year has certainly been one for the memory books.
Injection Vulnerabilities – 20 Years and Counting - Security Boulevard
Injection vulnerabilities are one of the oldest exploitable software defects, which unfortunately are still prevalent today. Doing a simple search on cve.mitre.org com for the term injection returns with over 10,852 injection-related vulnerabilities in commercial and open source software since the year 2000, and the number of injection vulnerabilities continues to grow daily.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Stephen
Contact Stephen, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack