Application Security News and Articles


Tiffany Data Breach Impacts Thousands of Customers

The high-end jewelry retailer is informing customers in the United States and Canada that hackers accessed information related to gift cards. The post Tiffany Data Breach Impacts Thousands of Customers appeared first on SecurityWeek.

How Blue Cube Secured Critical Client Communications with EasyDMARC

Originally published at How Blue Cube Secured Critical Client Communications with EasyDMARC by Sona Mirzoyan. About the Customer Headquarters: United Kingdom, BrentfordFounded: 2003Website: ... The post How Blue Cube Secured Critical Client ...

Threat Actor Infests Hotels With New RAT

RevengeHotels has been targeting hotels in Brazil and Spanish-speaking regions with VenomRAT implants in 2025. The post Threat Actor Infests Hotels With New RAT appeared first on SecurityWeek.

Healthcare Under Siege: Your Email Security Needs a New Strategy

If you haven't given your Healthcare IT teammate a hug or a high five lately, you owe them one. Healthcare IT Admins are fighting a war on multiple fronts. While you're managing digital transformation, ensuring uptime for critical care systems, ...

Who Owns Threat and Exposure Management in Your Organization?

A study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable shows responsibility for exposure management scattered across multiple teams with conflicting priorities. It’s time to build the team of the future ...

SonicWall Confirms Unauthorized Access to MySonicWall Backup Files

SonicWall confirmed yesterday that configuration backups stored in some MySonicWall customer accounts were accessed without authorization in a recent security incident. The breach involves preference files containing sensitive firewall settings ...

SonicWall Prompts Password Resets After Hackers Obtain Firewall Configurations

The company sent a new preferences file to less than 5% of customers, urging them to import it into firewalls and reset their passwords. The post SonicWall Prompts Password Resets After Hackers Obtain Firewall Configurations appeared first on ...

NSFOCUS Monthly APT Insights – August 2025

Regional APT Threat Situation In August 2025, the global threat hunting system of Fuying Lab detected a total of 23 APT attack activities. These activities were primarily concentrated in regions including South Asia, East Asia, Eastern Europe, ...

Salesforce Partners with Google Cloud to Integrate Gemini AI in Multi-Billion Dollar Deal

Discover the transformative partnership between Salesforce and Google Cloud, focusing on AI integration and enhanced CRM capabilities. Learn how this collaborat The post Salesforce Partners with Google Cloud to Integrate Gemini AI in ...

South Korea Personal Information Privacy Act

What is the Data Privacy Act (DPA)? The Philippines Data Privacy Act of 2012 (Republic Act No. 10173), commonly referred to as the DPA, is the country’s primary data protection law. Enacted in August 2012, the Act was designed to safeguard the ...

Nearly 250,000 Impacted by Data Breach at Medical Associates of Brevard 

The BianLian ransomware group took credit for the cyberattack on the healthcare organization in January 2025.  The post Nearly 250,000 Impacted by Data Breach at Medical Associates of Brevard  appeared first on SecurityWeek.

Gurucul’s AI-IRM accelerates insider risk detection

Gurucul released its AI Insider Risk Management (AI-IRM) product, which extends autonomous triage, bias-free risk scoring, context-rich investigation, and human-AI collaboration to automate response workflows directly within insider risk ...

Stealth in Plain Sight: Cryptojackers Hijack PowerShell and Windows Processes to Evade Detection

Darktrace researchers uncovered a sophisticated cryptojacking attempt using PowerShell scripts to inject NBMiner into Windows processes. Experts warn that modern cryptomining malware is more than a nuisance—posing risks to productivity, data ...

Israeli Cyber Fund Glilot Capital Raises $500 Million

The top-performing venture fund heavily invests in startups building cybersecurity, AI, and enterprise software. The post Israeli Cyber Fund Glilot Capital Raises $500 Million appeared first on SecurityWeek.

QuProtect R3 provides encryption visibility across systems

QuSecure launched QuProtect R3, an integrated, production-ready PQC platform designed to simplify encryption modernization for everyone. With the platform’s Reconnaissance innovation, a complimentary module for qualified companies, ...

Chrome 140 Update Patches Sixth Zero-Day of 2025

An exploited type confusion in the V8 JavaScript engine tracked as CVE-2025-10585 was found by Google Threat Analysis Group this week. The post Chrome 140 Update Patches Sixth Zero-Day of 2025 appeared first on SecurityWeek.

DruAI Agents and MetaGraph deliver real-time data intelligence

Druva released Dru MetaGraph, a secure, tenant-specific, graph-powered foundation for real-time data intelligence, and two new DruAI Agents: Insights Agent and Lifecycle Agent. Together, these innovations can help customers uncover insights ...

Insight Partners Confirms Data Breach Result of Ransomware Attack

Venture capital firm Insight Partners says the data breach disclosed in February 2025 impacts over 12,000 people. The post Insight Partners Confirms Data Breach Result of Ransomware Attack appeared first on SecurityWeek.

Catchpoint improves monitoring posture with AI capabilities

Catchpoint released two AI-powered capabilities designed to simplify digital resilience for critical applications: Catchpoint Root Cause Analysis (RCA) and Catchpoint Advisor, which improve monitoring posture and bring immediate insights into IT ...

Absolute Security Rehydrate restores compromised endpoints

Absolute Security released Rehydrate, empowering enterprises to recover from IT or cyber incidents remotely and at scale to minimize operational downtime. Enterprises with business operations that have been stopped by Windows PCs made inoperable ...