Agile methodologies in software development have accelerated in recent years, helping businesses provide value to customers much faster. This approach takes an interactive approach to software development, where products are developed in small iterations throughout the entire process.

Digitalisation has made many businesses adopt new technologies at an ever-increasing rate. The change to agile approaches has been central to all this, as they enable businesses to solve solutions much faster. But one area that hasn't kept up is penetration (security) testing, as it remains costly, inefficient, and complex. With a correlated rise of malicious cyberattacks, many businesses are at risk of financial and data losses that can leave severe and lasting impacts.

With the ability to draw fresh ideas from large crowds, save costs and generate brand awareness, it’s easy to see the attractiveness of crowdsourcing. But it can always leave you wide open to more failure and generate unprecedented turbulence, especially around intellectual property, cross-border data sharing and work quality. With the increased likelihood of such threats, crowdsourcing can be a questionable choice.

The correlation between the rise of online businesses and cyber-attacks is no coincidence. With nearly 1 cyber-attack happening every 39 seconds, every business is at risk. Unfortunately, many of them are underprepared because traditional penetration testing is costly, lengthy and complicated.

The rise of artificial intelligence (AI) has brought about significant advancements in various industries, including cybersecurity. However, alongside these advancements, concerns about adversarial AI and its potential to pose a significant threat to cybersecurity have emerged.

One word answer “NO”. This is based on my experience w.r.t cleaning Wordpress (WP) sites against malware attack. Hackers mostly attack CMS based websites i.e.

Off late, code reviews have been gaining a lot of popularity. Organizations which till recently were content with a secure network and an occasional Penetration Test are now getting their application’s code reviewed before going live.

Very often, I have encountered problems with updating nessus home feed plugins and components. This is the common message from Nessus.

Last week I spoke at OWASP day in Auckland, New Zealand. It was all security+fun and had a crowd more than expected, ~600 approximately.