If you're worried about the security of your database -- but can't afford a full-blown vulnerability assessment right now -- you're in luck. Imperva is now offering a free database vulnerability ...

In brief: Open-source development projects often must rely on many external dependencies, saving developers the work of building new functionality from scratch. Google's new tool is the latest part of ...

Vulnerability scanning is a staple of information security, but no software is perfect. Vulnerabilities are discovered on a daily basis — possibly exposing critical systems or data to exploit and ...

eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. Database security firm Sentrigo has added vulnerability ...

Securing the software supply chain is an increasingly complex and time-consuming challenge for enterprises. To help developers find vulnerability data for open source components, Google launched ...

Organizations handle vulnerability management in various ways, from training and best-practice implementations to filtering out all but the most dangerous threats. Here's a look at some of today's ...

Open source Trivy plugs into the software build process and scans container images and infrastructure-as-code files for vulnerabilities and misconfigurations. Attacks on cloud-native infrastructures ...

Orbitz CISO Ed Bellis explains how the proliferation of vulnerability assessment products and services has created chaos, and how SCAP may be the answer. It’s safe to say that vulnerability assessment ...