Application Security News and Articles


CyberArk unveils new capabilities to reduce risk across human and machine identities

CyberArk announced new discovery and context capabilities across its Machine Identity Security portfolio. The enhancements enable security teams to find, understand and secure machine identities, spanning certificates, keys, secrets, workloads ...

Roll your own bot detection: fingerprinting/JavaScript (part 1)

This is the first article in a two-part series where we show how to build your own anti-bot system to protect a login endpoint, without relying on third-party services. Why write this? Many bot detection solutions, reCAPTCHA, Turnstile, or ...

Radiflow360 unifies OT risk, compliance, and response

Radiflow has launched the new Radiflow360, a unified, AI-enhanced OT cybersecurity platform that delivers visibility, risk management and streamlined incident response for mid-sized industrial enterprises. Radiflow360 now enables mid-sized ...

Rethinking AI security architectures beyond Earth

If you think managing cloud security is complex, try doing it across hundreds of satellites orbiting the planet. Each one is a moving endpoint that must stay secure while communicating through long, delay-prone links. A new study explores how AI ...

DefectDojo: Open-source DevSecOps platform

DefectDojo is an open-source tool for DevSecOps, application security posture management (ASPM), and vulnerability management. It helps teams manage security testing, track and remove duplicate findings, handle remediation, and generate reports. ...

Developing economies are falling behind in the fight against cybercrime

Cybercrime is a global problem, but not every country is equally equipped to fight it. In many developing economies, cybersecurity is still seen as a luxury, something nice to have when budgets allow. That means little investment in tools, ...

New system aims to keep people connected when networks fail

When disaster strikes, communication often fails. Cell towers can go offline, internet connections can disappear, and people are left without a way to share information or ask for help. A new research project looks at how to keep people talking ...

Purdue 2.0? : Rising to the Challenge to secure OT with Zero Trust Connectivity

Our connected world is getting dangerously messy. Demands on the effective protection of OT environments has never been greater than it is today. This is only growing. Cybercrime is becoming more organized with RaaS and the internal threat is ...

AI testing – harder than it looks

As AI overload becomes a real thing, ominous, outsized claims are becoming annoyingly de rigueur. But testing those claims against real-world frameworks and threat vectors are harder than it seems. We should know, we’re doing it. For us, this ...

News alert: INE Security report finds cyber-IT silos leave teams exposed — cross-training urged

RALEIGH, N.C., Oct. 7, 2025, CyberNewswire – INE Security, a leading provider of cybersecurity training and certifications, today announced the results of a global study examining the convergence of networking and cybersecurity ...

Reassuring Stakeholders with Solid Secrets Management

How Can Non-Human Identities Transform Secrets Management? Imagine where machine identities, much like human ones, silently pave the way for successful operations across diverse industries. How are these Non-Human Identities (NHIs) reshaping ...

Enhancing Data Protection with Advanced PAM Techniques

How Do Advanced PAM Techniques Enhance Data Protection? Where cybersecurity threats are constantly evolving, how can organizations ensure that their data remains protected? One of the most effective strategies is implementing advanced Privileged ...

Justifying Investments in NHI Security

How Can Non-Human Identities Bridge Security Gaps in Cloud Environments? Have you considered how the management of Non-Human Identities (NHIs) can transform your organization’s approach to cloud security? With the rapid digitalization across ...

Fostering Innovation with Secure Machine Identities

How Safe Are Your Machine Identities in the Face of Innovation? Innovation is non-negotiable for staying competitive. Yet, how many organizations truly consider the security of their machine identities as they innovate? Non-Human Identities ...

Better Angels of AI Agents

The post Better Angels of AI Agents appeared first on AI Security Automation. The post Better Angels of AI Agents appeared first on Security Boulevard.

Why SOCs Are Turning to Autonomous Security Operations: It’s Time Automation Worked For You

SOCs use D3's Morpheus AI to investigate, triage, and respond in seconds. See how it adds 20-100 analyst equivalents. The post Why SOCs Are Turning to Autonomous Security Operations: It’s Time Automation Worked For You appeared first on D3 ...

USENIX 2025: PEPR ’25 – Panel: How Privacy Engineers Can Shape The Coming Wave Of AI Governance

Moderator, Panelists: Moderator - Zachary Kilhoffer, Dynatrace; Panelists: Hoang Bao, Axon; Masooda Bashir, University of Illinois at Urbana-Champaign; Debra Farber, Lumin Digital; Sarah Lewis Cortes, Netflix and NIST; Akhilesh Srivastava, ...

#RediShell: Redis/Valkey Get ‘Perfect 10’ Critical RCE Vuln

Redis hell: CVSS 10.0 vulnerability in ubiquitous cloud storage layer. PATCH NOW. The post #RediShell: Redis/Valkey Get ‘Perfect 10’ Critical RCE Vuln appeared first on Security Boulevard.

SpamGPT – When Phishing Gets a Marketing Degree

Cybercriminals just got their own HubSpot (for less than the price of a used car). The post SpamGPT – When Phishing Gets a Marketing Degree appeared first on Security Boulevard.

5 Everyday Workflows That Add Business Risk & How to Secure Them

The post 5 Everyday Workflows That Add Business Risk & How to Secure Them appeared first on Votiro. The post 5 Everyday Workflows That Add Business Risk & How to Secure Them appeared first on Security Boulevard.