Application Security News and Articles


How to Make the Most of Your AirSwap sAST Rewards

Simple Tips to Increase Your AirSwap sAST Staking RewardsContinue reading on Medium »

‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft

The newly identified Android banking trojan Crocodilus takes over devices, enabling overlay attacks, remote control, and keylogging. The post ‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft appeared first on ...

15 Reasons to Trust Seceon aiSIEM Solution: Transforming Enterprise Cybersecurity

In today’s complex cybersecurity landscape, organizations need robust security information and event management (SIEM) solutions that can effectively detect and respond to threats. Seceon’s aiSIEM solution stands out as a powerful option in ...

CISA Analyzes Malware Used in Ivanti Zero-Day Attacks

CISA has published its analysis of Resurge, a SpawnChimera malware variant used in attacks targeting a recent Ivanti Connect Secure zero-day. The post CISA Analyzes Malware Used in Ivanti Zero-Day Attacks appeared first on SecurityWeek.

170,000 Impacted by Data Breach at Chord Specialty Dental Partners

An email security incident at Chord Specialty Dental Partners, a US dental service organization, has impacted more than 170,000 people.  The post 170,000 Impacted by Data Breach at Chord Specialty Dental Partners appeared first on SecurityWeek.

Industry Moves for the week of March 31, 2025 - SecurityWeek

Explore industry moves and significant changes in the industry for the week of March 31, 2025. Stay updated with the latest industry trends and shifts.

Windows 11 quick machine recovery: Restoring devices with boot issues

Microsoft has rolled out quick machine recovery, a new Windows feature aimed at preventing prolonged widespread outages like the one caused by a faulty CrowdStrike update in July 2024. The goal of the feature is to allow IT administrators to ...

CRQ & CTEM: Prioritizing Cyber Threats Effectively | Kovrr

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post CRQ & CTEM: Prioritizing Cyber Threats Effectively | Kovrr appeared first on Security Boulevard.

Arbitrary File Write via Archive Extraction (Zip Slip)- OWASP Juiceshop #1

Zip Slip is an another path traversal vulnerability that occurs when extracting ZIP (or other archive) files without properly validating…Continue reading on Medium »

Lessons from the Oracle and Coinbase Breaches

Proper secrets management could have prevented or reduced the impact of the Oracle Cloud & Coinbase breaches-- learn what steps you can take. The post Lessons from the Oracle and Coinbase Breaches appeared first on Akeyless. The post Lessons ...

What are CCPA Penalties for Violating Compliance Requirements?

Learn what CCPA penalties look like and how your business can avoid costly fines with the right compliance strategy. The post What are CCPA Penalties for Violating Compliance Requirements? appeared first on Scytale. The post What are CCPA ...

Canada launches breach risk self-assessment online tool

Privacy Commissioner of Canada Philippe Dufresne has launched a new online tool that will help businesses and federal institutions that experience a privacy breach to assess whether the breach is likely to create a real risk of significant harm ...

senhasegura rebrands as Segura, marking a new chapter in identity security

senhasegura, a globally recognized leader in Privileged Access Management (PAM), announces its evolution into Segura, marking a new chapter for the company and its mission to deliver futureproof identity security. Founded in Brazil in 2009, ...

HECVAT 4.0

What is HECVAT 4.0? HECVAT 4.0 (Higher Education Community Vendor Assessment Toolkit) is a standardized framework designed to help higher education institutions evaluate the cybersecurity, privacy, and compliance practices of their third-party ...

Two things you need in place to successfully adopt AI

Organizations should not shy away from taking advantage of AI tools, but they need to find the right balance between maximizing efficiency and mitigating organizational risk. They need to put in place: 1. A seamless AI security policy AI may have ...

Exegol: Open-source hacking environment

Exegol is a community-driven hacking environment, which helps users deploy hacking setups quickly and securely. It’s made for penetration testers, CTF players, bug bounty hunters, researchers, defenders, and both new and experienced users. ...

Only 2-5% of application security alerts require immediate action

The large volume of security alerts, many created by automated tools, is overwhelming security and development teams, according to the 2025 Application Security Benchmark report by Ox Security. The report is based on an analysis of over 101 ...

GenAI turning employees into unintentional insider threats

The amount of data being shared by businesses with GenAI apps has exploded, increasing 30x in one year, according to Netskope. The average organization now shares more than 7.7GB of data with AI tools per month, a massive jump from just 250MB a ...

Understanding Privacy Changes: eBay’s AI Policy and The Future of Data Privacy

In this episode, host Tom Eston discusses recent privacy changes on eBay related to AI training and the implications for user data. He highlights the hidden opt-out feature for AI data usage and questions the transparency of such policies, ...

How to recognize and prevent deepfake scams

Deepfakes are a type of synthetic media created using AI and machine learning. In simple terms, they produce videos, images, audio, or text that look and sound real, even though the events depicted never actually happened. These altered clips ...