Tainted Data and Format String Attack Strike Again
A recent code execution vulnerability (we also call this a code injection vulnerably) was discovered in Palo Alto Networks’...
The Role of Static Analysis in the SAE J3061 Cybersecurity Process Framework
The Society of Automotive Engineers (SAE) J3061 cybersecurity process framework was created to address a large disconnect...
What is Static Application Security Testing (SAST)?
We often get the question from developers and engineering managers: “What is SAST?” often followed by “Ok, what do SAST tools...
Static Analysis and UL 2900 Standard for Software Cybersecurity
The UL 2900 is a software cybersecurity standard, specifically a Cybersecurity Assurance Program or CAP, released by...
FDA Updates Guidance for Managing Cybersecurity for Medical Devices
In a previous post, I discussed the role of static analysis in managing cybersecurity for medical devices. It was in reaction...