Third-party code putting companies at risk

[ronjor]

By Jeremy Kirk

Twitter's recent vulnerability was caused by third-party code, a growing problem in the industry

The use of third-party code in applications represents a big security risk for companies, according to a study from security vendor Veracode.

Companies often use code libraries that have been developed from either open-source projects or outsourcing organizations that have been contracted to create applications, said Jason Steer, a solutions architect for Veracode, which specializes in scanning code for vulnerabilities.

http://www.infoworld.com/d/developer...anies-risk-302