About Positive Technologies - ptsecurity.com
WEBPositive Technologies is an industry leader in result-driven cybersecurity and a major global provider of information security solutions. Our mission is to safeguard businesses and entire industries against cyberattacks and non-tolerable damage. Over 4,000 organizations worldwide use technologies and services developed by our company.
Leader in results-oriented cybersecurity
WEBPositive Technologies detects a series of attacks via Microsoft Exchange Server. April 15, 2024. SteganoAmor campaign: TA558 mass-attacking companies and public institutions all around the world. LazyStealer: sophisticated does not mean better. November 30, 2023. Hellhounds: operation Lahat.
Secure Software Development: Best Practices and Methodologies …
WEBFeb 25, 2020 · There is a ready-made solution that provides a structured approach to application security—the secure development lifecycle (SDL). It is a set of development practices for strengthening security and compliance. For maximum benefit, these practices should be integrated into all stages of software development and maintenance.
Threats and vulnerabilities in web applications 2020–2021
WEBJun 14, 2022 · In 2020–2021, the share of web applications containing high-severity vulnerabilities rose significantly (66% in 2020, 62% in 2021) compared to 2019. At the same time, however, we have observed a considerable drop in the average number of high- and medium-severity vulnerabilities per application, which indicates a shift to secure development approaches.
What is a Web Application Firewall (WAF): Definition & Guide
WEBPublished on May 28, 2019. Commonly abbreviated as WAF, a web application firewall is used to filter, block, or monitor inbound and outbound web application HTTP traffic. Compared to intrusion detection systems (IDS/IPS), WAFs have a strong focus on the application traffic and have the ability to provide deep data flow analysis.
SAST, DAST, IAST, and RASP: how to choose? - ptsecurity.com
WEBAug 2, 2019 · Employing static application security testing (SAST) allows the ability to catch defects early on in development. Dynamic application security testing (DAST) provides an outside perspective on the application before it goes live. Then, interactive application security testing (IAST) uses software instrumentation to analyze running applications.
What is a cross-site scripting (XSS) attack? - ptsecurity.com
WEBJul 22, 2020 · Definition. Cross-site scripting, often abbreviated as XSS, is a type of attack in which malicious scripts are injected into websites and web applications for the purpose of running on the end user's device. During this process, unsanitized or unvalidated inputs (user-entered data) are used to change outputs.
How to prevent SQL injection attacks - ptsecurity.com
WEBAug 2, 2019 · SQL injection protection: conclusion. Prevention techniques such as input validation, parametrized queries, stored procedures, and escaping work well with varying attack vectors. However, because of the large variation in the pattern of SQL injection attacks they are often unable to protect databases.
WEBbilities in the total number of vulnerabilities i. entified. Two-thirds of sites contain such vulnerabilities.72% of vu. nerabilities were related to flaws in web application code.In 2020–2021, 48 % of web applications had low or extremely low secur. eb applic. ion vulnerabilities15%53% 32%Hig.
Masters of Mimicry: new APT group ChamelGang and its arsenal
WEBSep 30, 2021 · The investigation revealed that the company's network had been compromised by an unknown group for the purpose of data theft. We gave the group the name ChamelGang (from the word "chameleon"), because the group disguised its malware and network infrastructure under legitimate services …