Blog

Risk is Reality: Our Take on the Recent Auth0 Vulnerability

By | Date posted: May 23, 2018

Last month, another major identity management vendor revealed a significant vulnerability. This time it was Auth0.

While conducting its own research, Cinta Infinita discovered the vulnerability in Auth0’s Legacy Lock API. The security firm noted it “was able to bypass password authentication when logging into Auth0’s Management Dashboard by forging an authentication token.”
Read more

Forum Systems API Security Gateway Solutions Now Available on Carahsoft’s GSA Schedule

By | Date posted: April 4, 2018

API-driven vulnerabilities and hacks continue to make headlines, as seen with Coincube, Reddit/Mailgun and Roku. As a result, more people and organizations are (finally) awakening to the seriousness of the threat.

API security is critical to businesses with any type of digital presence, and the stakes are critical for the federal and public sector to protect data and applications. That’s why Forum Systems has continued to champion our unparalleled security-first pedigree and industry-first certifications with rigorous standards such as NIST FIPS 140-2 Level 2 and Common Criteria NDPP.
Read more

Money Mule(Soft): Salesforce Acquires API Integration Company for $6.5 Billion

By | Date posted: March 28, 2018

Well, it has happened again.

Another tech behemoth has made a massive acquisition to bolster its cloud presence – this time in the most expensive cloud software deal in history.

Last fall, it was Google gobbling up Apigee; this week, it’s Salesforce subsuming MuleSoft.

Alliteration aside, what’s the significance of this latest deal, both for the broader industry and for Forum Systems’ customers and partners?
Read more

IAM Attacks, IoT Hubs and API Security Spend, Oh My! We Present Our 2018 Predictions

By | Date posted: December 20, 2017

2017 was a devastating year in security: Equifax, Verizon, WannaCry – enough said. Even more so, the Instagram vulnerability, OneLogin breach, Circle with Disney web filter flaws, Oracle’s Identity Manager vulnerability and Wishbone hack hit close to home, reinforcing what we’ve been preaching ad nauseam: that IAM tools and APIs remain at risk.

The good news, though, is that C-suite executives are continuing to ramp up their investments in security technologies, practices, and education. According to CEB (now part of Gartner), 2017 was the seventh continuous year of budget increases for security; and looking ahead to 2018, Gartner predicts that information security spending will continue to grow, reaching a total of $93 billion.

Read more

Identity Divorces Security…Again—The Oracle Edition

By | Date posted: November 14, 2017

Oracle recently released a Security Alert Advisory regarding a newly identified – and soon thereafter patched – vulnerability within Oracle’s Identity Manager, a user identity validation tool for granting access to enterprise systems.

The bug referred to by Threatpost’s Michael Mimoso as one that’s “as bad as it gets,” scored a 10 on the CVSS score – the highest severity possible. As explained via NIST’s National Vulnerability Database, the vulnerability is “easily exploitable” and “can result in a takeover of Oracle Identity Manager.”

Read more

Forum Systems Joins AFCEA Community

By | Date posted: October 11, 2017

Since 1946, AFCEA has been bringing together industry experts and government agencies to provide a forum for collaboration that better aligns technology and strategy with the needs of our government and military. AFCEA is widely recognized as a hub for industry innovation and thought leadership, and Forum Systems is excited to announce that we’ve joined the non-profit international organization as an official member.

Read more