Historically, state-sponsored hackers have used memory corruption vulnerabilities like buffer overflows to create malware for their attacks, targeting operating systems and appliances written in C/C++. A new set of attacks, allegedly coming from Iran, is using a new strategy. Web applications and services, written in higher-level languages like Java and .NET, are being targeted to establish a foothold in your datacenter and pivot to other internal systems.
[Click here to read the full story on Dark Reading]
A pioneer in application security, Jeff Williams is the founder and CTO of Contrast Security, a revolutionary application security product that enhances software with the power to defend itself, check itself for vulnerabilities, and join a security command and control ... View Full Bio