Leader in results-oriented cybersecurity
WEBPositive Technologies detects a series of attacks via Microsoft Exchange Server. April 15, 2024. SteganoAmor campaign: TA558 mass-attacking companies and public institutions all around the world. LazyStealer: sophisticated does not mean better. November 30, 2023. Hellhounds: operation Lahat.
Secure Software Development: Best Practices and Methodologies …
WEBFeb 25, 2020 · There is a ready-made solution that provides a structured approach to application security—the secure development lifecycle (SDL). It is a set of development practices for strengthening security and compliance. For maximum benefit, these practices should be integrated into all stages of software development and maintenance.
What is a cross-site scripting (XSS) attack? - ptsecurity.com
WEBJul 22, 2020 · Definition. Cross-site scripting, often abbreviated as XSS, is a type of attack in which malicious scripts are injected into websites and web applications for the purpose of running on the end user's device. During this process, unsanitized or unvalidated inputs (user-entered data) are used to change outputs.
Threats and vulnerabilities in web applications 2020–2021
WEBJun 14, 2022 · In 2020–2021, the share of web applications containing high-severity vulnerabilities rose significantly (66% in 2020, 62% in 2021) compared to 2019. At the same time, however, we have observed a considerable drop in the average number of high- and medium-severity vulnerabilities per application, which indicates a shift to secure development approaches.
WEB650 employees. Offices opened in Brno (Czech Republic) and Samara (Russia). Positive Technologies Industrial Security Incident Manager (PT ISIM), developed to protect industrial control/SCADA systems. PT MultiScanner, a multithreaded system for identifying malicious content. PT SS7 Attack Discovery (PT SS7 AD) developed for detecting attacks on ...
PT NAD users to be able to see data on all identified threats in …
WEBMar 24, 2021 · PT NAD users to be able to see data on all identified threats in single feed. Positive Technologies has released the next version of PT Network Attack Discovery (10.1), a system for deep traffic analysis. With it, you can detect attacks using new analytics modules, collect up-to-date information about network hosts, and centrally learn about ...
Rootkits: evolution and detection methods - ptsecurity.com
WEBNov 3, 2021 · Compared to other tools in the attacker’s arsenal, rootkits are less common than other types of malware. They pose a threat because they can hide malicious activity on devices and make the timely detection of a compromise difficult. Rootkits are still successfully used in attacks, despite the introduction of protection against them in modern operating systems. We will tell you how rootkits ...
Cybersecurity threatscape of African countries 2022–2023
WEBJul 28, 2023 · About the research. Africa is a region experiencing rapid economic development. Over the past twenty years, the combined GDP of the region has increased more than fivefold, from USD 695.88 billion in 2002 to USD 2.98 trillion in 2022. GDP growth for 2023 is estimated at 3–4% and is projected to exceed USD 4 trillion by 2027.
ATM logic attacks: scenarios, 2018 - ptsecurity.com
WEBNov 14, 2018 · Introduction. In January 2018, the U.S. Secret Service, as well as major ATM vendors Diebold Nixdorf and NCR, issued urgent warnings about the threat of attacks on ATMs.These warnings were notable because of the nature of the threat: criminals were said to be planning to plant malware on ATMs or …
How to prevent SQL injection attacks - ptsecurity.com
WEBAug 2, 2019 · SQL injection protection: conclusion. Prevention techniques such as input validation, parametrized queries, stored procedures, and escaping work well with varying attack vectors. However, because of the large variation in the pattern of SQL injection attacks they are often unable to protect databases.