Application Security News and Articles


Kopia: Open-source encrypted backup tool for Windows, macOS, Linux

Kopia is an open-source backup and restore tool that lets you create encrypted snapshots of your files and store them in cloud storage, on a remote server, on network-attached storage, or on your own computer. It doesn’t create a full image of ...

Deploying SonarQube on Kubernetes with Helm Charts

By using a Helm Chart to deploy SonarQube Server, teams can quickly provision a production-ready SonarQube Server instance with minimal configuration while adopting best practices for scalability, security, and maintainability. The post Deploying ...

Review: Adversarial AI Attacks, Mitigations, and Defense Strategies

Adversarial AI Attacks, Mitigations, and Defense Strategies shows how AI systems can be attacked and how defenders can prepare. It’s essentially a walkthrough of offensive and defensive approaches to AI security. About the author John ...

Smart manufacturing demands workers with AI and cybersecurity skills

The manufacturing sector is entering a new phase of digital transformation. According to Rockwell Automation’s 10th Annual State of Smart Manufacturing Report, 56% of manufacturers are piloting smart manufacturing initiatives, 20% have deployed ...

Public Wi-Fi Myths: Why You’re Probably Safer Than You Think

Public Wi-Fi has a bad reputation — but in 2025, the “you’ll get hacked instantly” fear is largely outdated. In this episode, Tom and Kevin dig into real research and modern protections that make most public Wi-Fi connections reasonably ...

Building a Smart Compliance Strategy in Cloud?

Is your Strategy for Cloud Compliance Intelligent Enough? One question prevails: is your compliance strategy smart enough to handle the complexities of the cloud environment? Understanding Non-Human Identities & Secret Management Before ...

Choosing the Right SAST Tool: A Practical Guide for Developers

Static Application Security Testing (SAST) is one of the earliest and most effective defenses in the DevSecOps lifecycle. By scanning…Continue reading on Medium »

BSidesSF 2025: The Growing Crisis In CVE Data Quality

Creator, Author and Presenter: Jerry Gamblin Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s ...

U.S. Rep Proposes Cyber Privateers to Fight Foreign Cyberthreats

A GOP congressman from Arizona has filed legislation to allow U.S. presidents to license private cyber experts to investigate cyberattacks against U.S. organizations and citizens and recover stolen assets through a centuries-old tactic used in ...

Troubling Tech Career Trends: From ‘Quiet Cracking’ to AI Anxiety

Some new terms are becoming popular in tech and cybersecurity careers, along with some unsettling workplace trends around burnout and fear of layoffs as AI gains ground in both the public and private sectors. The post Troubling Tech Career ...

Week in review: Covertly connected and insecure Android VPN apps, Apple fixes exploited zero-day

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Android VPN apps used by millions are covertly connected AND insecure Three families of Android VPN apps, with a combined 700 million-plus ...

Privileged Access Management Software Solutions

Explore top Privileged Access Management (PAM) software solutions, their key features, implementation challenges, and integration with SSO & CIAM. A guide for CTOs & VP Engineering. The post Privileged Access Management Software Solutions ...

Managing Users without Tokens in Passwordless Systems

Explore user management strategies in passwordless authentication systems that don't rely on tokens. Learn about biometric authentication, device binding, and more. The post Managing Users without Tokens in Passwordless Systems appeared first on ...

Adapting to New Age Cyber Threats with NHIs?

Are Traditional Security Measures Enough? The advent of intelligent non-human identities (NHIs) has shifted cybersecurity, posing new challenges for organizations to overcome. Are traditional security measures, designed to protect human ...

Feeling Assured with Your Secrets Scanning Tools?

Are your secrets scanning tools instilling confidence? Securing Non-Human Identities: A Vital Component of Cybersecurity Are your secrets scanning tools providing the assurance you need? With data protection becomes an ever-increasing concern, ...

Staying Calm with Effective Secrets Rotation?

Why Is Secrets Rotation Essential for a Calm Security Strategy? What if we told you that your company’s data security could be significantly improved by adopting a simple practice? Known as secrets rotation, this strategy has proven to be an ...

BSidesSF 2025: How To Tame Your Dragon: Productionizing Agentic Apps Reliably And Securely

Creator, Author and Presenter: Thomas Vissers, Tim Van hamme Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the ...

Scraping At Carrier Scale: Why Mobile IPs Outperform Datacenter IPs

Learn why mobile IPs outperform datacenter IPs for large-scale scraping, reducing bans and boosting success with natural traffic patterns. The post Scraping At Carrier Scale: Why Mobile IPs Outperform Datacenter IPs appeared first on Security ...

What is OTP Authentication? A Simple Guide

Introduction Let’s be honest — passwords are kind of a pain. We’re told to create long, complicated ones with numbers, […] The post What is OTP Authentication? A Simple Guide appeared first on Security Boulevard.

Looking for the Best VMDR and Pentesting Tool? The Breakthrough

Let’s come straight to the point! Kratikal gives you AutoSecT. Your security is the main driving point that made it possible to build the world’s leading VMDR and pentesting platform, powered by AI. Do you know what’s more interesting? Your ...