Application Security News and Articles


Snyk AppRisk Pro leverages AI and third-party integrations for faster risk mitigation

Snyk has released Snyk AppRisk Pro, pairing artificial intelligence (AI) with application context from third-party integrations to help application security (AppSec) and development teams address business-critical risk and accelerate fixes. Snyk ...

Lineaje OSM improves software supply chain security

Lineaje unveiled Open-Source Manager (OSM), which brings transparency to open-source software components in applications and proactively manages and mitigates associated risks. Lineaje’s OSM enables full lifecycle governance of open-source ...

Hardening Embedded Linux IoT Devices: A Comprehensive Guide

  Embedded systems often operate on specialized hardware with limited processing power, memory, and storage. Many embedded Linux IoT devices collect and transmit sensitive data. Hardening them reduces the risk of breaches that could expose this ...

Bitwarden Authenticator protects online services and applications

Bitwarden launched a standalone app for two-factor authentication (2FA) to protect online services and applications from unauthorized access. Bitwarden Authenticator generates and stores time-based one-time passwords (TOTP), enabling all users to ...

Virsec releases security tools to offer ransomware protection

Virsec released TrustSight and TrustGuardian, its newest security tools in the fight against an ever-expanding threat environment – one where EDRs miss up to 30% of attacks, and ransomware detonates in milliseconds, according to various ...

LabHost Crackdown: 37 Arrested In Global Cybercrime Bust

In a significant stride against cybercrime, law enforcement agencies worldwide have orchestrated a comprehensive crackdown on LabHost, a notorious cybercrime service facilitating multi-national phishing operations. This operation, named PhishOFF ...

2024 Data Breach Investigations Report: Most breaches involve a non-malicious human element

The exploitation of vulnerabilities as an initial point of entry almost tripled from the previous year, accounting for 14% of all breaches, according to Verizon’s 2024 Data Breach Investigations Report, which analyzed a record-high 30,458 ...

Securing your organization’s supply chain: Reducing the risks of third parties

When Stephen Hawking said that “we are all now connected by the internet, like neurons in a giant brain”, very few people understood the gravity of his statement. But ten years on from his famous interview with USA Today, it’s safe to say ...

IAM and Passkeys: 4 Steps Towards a Passwordless Future

IAM and Passkeys: 4 Steps Towards a Passwordless Future madhav Thu, 05/02/2024 - 05:07 In the ever-evolving landscape of cybersecurity, Identity and Access Management (IAM) remains a vital link in the cybersecurity chain. However, with World ...

Understanding emerging AI and data privacy regulations

In this Help Net Security interview, Sophie Stalla-Bourdillon, Senior Privacy Counsel & Legal Engineer at Immuta, discusses the AI Act, the Data Act, and the Health Data Space Regulation. Learn how these regulations interact, their ...

reNgine: Open-source automated reconnaissance framework for web applications

reNgine is an open-source automated reconnaissance framework for web applications that focuses on a highly configurable and streamlined recon process. Developing reNgine reNgine was developed to overcome the constraints of conventional ...

Women rising in cybersecurity roles, but roadblocks remain

The ISC2 study on women in cybersecurity, a comprehensive research effort that collected responses from 2,400 women, has revealed several significant findings. These include promising trends in women’s entry into the profession, their roles ...

AI-driven phishing attacks deceive even the most aware users

Vishing and deepfake phishing attacks are on the rise as attackers leverage GenAI to amplify social engineering tactics, according to Zscaler. AI automates and personalizes various aspects of the attack process AI-driven phishing attacks leverage ...

Post DBIR 2024: 7 Ways to Reduce Your Cyber Risk

The Verizon DBIR is the most anticipated annual report on data breaches with many incredible insights, and this year is no exception. The most surprising finding is the rapid explosion in vulnerability exploitation, which now constitutes one of ...

NSFOCUS Recognized by Independent Research Firm for Its Bot Management Capabilities

NSFOCUS was included in Forrester’s The Bot Management Software Landscape, Q1 2024. SANTA CLARA, Calif., May 2, 2024 – NSFOCUS, a global leader in cybersecurity solutions, has been recognized by Forrester, a leading market research company, ...

RSAC 2024 Innovation Sandbox | P0 Security’s Cloud Access Governance Platform

The RSA Conference 2024 will kick off on May 6. Known as the “Oscars of Cybersecurity,” the RSAC Innovation Sandbox has become a benchmark for innovation in the cybersecurity industry. Today, let’s get to know the company P0 Security. ...

Security in the AI Sector: Understanding Infostealer Exposures and Corporate Risks

As Constella analyzed in the first part of this blog series, which focused on exhibitions in the emerging AI sector, we’ll delve deeper into the risks and vulnerabilities in this field, along with the threat of Infostealer exposures. Constella ...

Reading the Mandiant M-Trends 2024

This is my informal, unofficial, unapproved etc blog based on my reading of the just-released Mandiant M-Trends 2024 report (Happy 15th Birthday, M-Trends! May you live for many googley years…) Vaguely relevant AI visual with … cybernetic ...

Kaseya 365 Ushers in the Dawn of a New Era in IT & Security Management

he opening keynote of Kaseya Connect Global 2024, Kaseya CEO Fred Voccola introduced the world to a solution that changesRead More The post Kaseya 365 Ushers in the Dawn of a New Era in IT & Security Management appeared first on Kaseya. The ...

Lawsuits After Ransomware on the Rise, Comparitech Says

Ransomware attacks are an expensive proposition for any company. For example, a report this week by cybersecurity firm Sophos found that while the percentage of companies that were victims of ransomware this year has dropped slightly, the ...