Application Security News and Articles


Randall Munroe’s XKCD ‘Satellite Imagery’

via the cosmic humor & dry-as-interstellar-space wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Satellite Imagery’ appeared first on Security Boulevard.

NDSS 2025 – LAMP: Lightweight Approaches For Latency Minimization In Mixnets With Practical Deployment Considerations

Session 7A: Network Security 2 Authors, Creators & Presenters: Mahdi Rahimi (KU Leuven), Piyush Kumar Sharma (University of Michigan), Claudia Diaz (KU Leuven) PAPER LAMP: Lightweight Approaches For Latency Minimization In Mixnets With ...

Pro-Russian Hackers Claim Cyberattack on French Postal Service

Central computer systems at French national postal service La Poste were knocked offline Monday in DDoS attack. The post Pro-Russian Hackers Claim Cyberattack on French Postal Service appeared first on SecurityWeek.

Best of 2025: Ukraine Pwns Russian Drone Maker — Gaskar is ‘Paralyzed’

Ukrainian Cyber Alliance and Black Owl team up to hack manufacturer of Russian military drones, sources  say. Gaskar Group, Russian designer of drones plaguing Ukraine’s skies, is in utter disarray. Or, at least, so says Ukrainian military ...

Best of 2025: LDAPNightmare: SafeBreach Labs Publishes First Proof-of-Concept Exploit for CVE-2024-49112

SafeBreach researchers developed a zero-click PoC exploit that crashes unpatched Windows Servers using the Windows Lightweight Directory Access Protocol (LDAP) remote code execution vulnerability (CVE-2024-49112). The post LDAPNightmare: ...

Real-World Cyber Attack Detection: How Modern SOCs Identify, Block, and Contain Advanced Threats

Executive Summary Modern cyberattacks rarely appear as a single, obvious incident. Instead, they manifest as multiple low-level signals across web, endpoint, DNS, cloud, and network telemetry. When analyzed in isolation, these signals may seem ...

Five Phishing Red Flags to Remember This Holiday Season

Holiday phishing is not a “carelessness” problem. It’s a timing problem. One rushed click can have outsized consequences: a stolen password, a compromised account, or malware installed in seconds. During the holidays, attackers count on ...

Recent Cyber Attacks and Threat Actor Activity: A Deep Dive into the Evolving Threat Landscape

Executive Overview Over the past week, global threat activity has highlighted a critical reality: modern cyber attacks are faster, more coordinated, and increasingly industrialized. From mass exploitation of web application vulnerabilities to ...

How Venture Studios Eliminate the Early-Stage Execution Gap

Most startups don’t fail because the idea was wrong.They fail because execution never caught up. The pitch deck looked solid. The market made sense. Early...Read More The post How Venture Studios Eliminate the Early-Stage Execution Gap appeared ...

How to Detect Insider Threats Before They Damage Your Business

Learn how deception, identity verification, automation, and zero trust help detect insider threats before they cause real business damage. The post How to Detect Insider Threats Before They Damage Your Business appeared first on Security Boulevard.

Why Mobile-First SaaS Needs Passwordless Authentication for Field Teams

Learn why passwordless authentication is essential for mobile-first SaaS used by field teams to improve security, speed, and productivity. The post Why Mobile-First SaaS Needs Passwordless Authentication for Field Teams appeared first on Security ...

ServiceNow to acquire Armis for $7.75 billion

ServiceNow entered into an agreement to acquire Armis for $7.75 billion in cash. The acquisition will expand ServiceNow’s security workflow offerings and advance AI-native, proactive cybersecurity and vulnerability response across all connected ...

Five identity-driven shifts reshaping enterprise security in 2026

2026 marks the tipping point when artificial intelligence begins to fundamentally reshape cyber risk. After several years of widespread adoption, AI moves beyond influencing how we work and starts transforming the enterprise itself. AI is now ...

What if your face could say “don’t record me”? Researchers think it’s possible

Phones, smart glasses, and other camera-equipped devices capture scenes that include people who never agreed to be recorded. A newly published study examines what it would take for bystanders to signal their privacy choices directly to nearby ...

19 Billion Passwords Leaked: Essential Tips for Your Protection

19 billion passwords leaked! Discover how to protect yourself and your organization with actionable tips. Secure your digital life today! The post 19 Billion Passwords Leaked: Essential Tips for Your Protection appeared first on Security Boulevard.

Conjur: Open-source secrets management and application identity

Conjur is an open-source secrets management project designed for environments built around containers, automation, and dynamic infrastructure. It focuses on controlling access to credentials such as database passwords, API keys, and tokens that ...

Governance maturity defines enterprise AI confidence

AI security has reached a point where enthusiasm alone no longer carries organizations forward. New Cloud Security Alliance research shows that governance has become the main factor separating teams that feel prepared from those that do not. ...

Elementary OS 8.1 rolls out with a stronger focus on system security

Elementary OS 8.1 is now available for download and shipping on select hardware from retailers such as Star Labs, Slimbook, and Laptop with Linux. The update arrives after more than a year of refinements based on community feedback and issue ...

Counterfeit defenses built on paper have blind spots

Counterfeit protection often leans on the idea that physical materials have quirks no attacker can copy. A new study challenges that comfort by showing how systems built on paper surface fingerprints can be disrupted or bypassed. The research ...

What happens to enterprise data when GenAI shows up everywhere

Generative AI is spreading across enterprise workflows, shaping how employees create, share, and move information between systems. Security teams are working to understand where data ends up, who can access it, and how its use reshapes security ...