Application Security News and Articles


Tackling software vulnerabilities with smarter developer strategies

In this Help Net Security interview, Karl Mattson, CISO at Endor Labs, discusses strategies for enhancing secure software development. Mattson covers how developers can address vulnerabilities in complex systems, ways organizations can better ...

CISOs need to consider the personal risks associated with their role

70% of cybersecurity leaders felt that stories of CISOs being held personally liable for cybersecurity incidents have negatively affected their opinion of the role, according to BlackFog. 34% believed that the trend of individuals being ...

Snowflake Will Make MFA Mandatory Next Year

Data warehousing firm Snowflake, which saw a lot of user accounts get hacked due to poor security hygiene, is making MFA mandatory for all user accounts by November 2025. The post Snowflake Will Make MFA Mandatory Next Year appeared first on ...

New infosec products of the week: December 13, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Cato Networks, Horizon3.ai, SecureAuth, Stamus Networks, Trellix, and Versa Networks. Trellix Drive Encryption enhances security against insider attacks ...

Achieving CyberSecure Canada Certification

CyberSecure Canada aims to help enterprises improve their security posture by implementing a baseline set of security controls. The post Achieving CyberSecure Canada Certification appeared first on Security Boulevard.

What Is an Application Vulnerability? 8 Common Types

Every application is susceptible to attacks, but web applications are more vulnerable than others. They interact with more networks and users—and every interaction is a risk. Any flaws or errors can lead to serious problems like unauthorized ...

Understanding the Role of AI in Cybersecurity

Artificial intelligence (AI) is reshaping the cybersecurity landscape—both potential attacks and impactful protections. Understanding how AI can be used in cybersecurity can help you build more efficient and adaptive defenses capable of ...

10 Container Security Best Practices: A Guide

Containers boost your application's scalability and efficiency. But without proper security, containerized environments can be vulnerable to data breaches, supply chain attacks, and other risks that derail projects. The post 10 Container Security ...

What’s a Zero-Day Vulnerability? Prevent Exploits and Attacks

Zero-day vulnerabilities are serious threats. They’re completely unknown to both the vendor and the user. That gives attackers a significant advantage, allowing them to attack systems before patches are available. The post What’s a Zero-Day ...

Critical Steps to Keep Your Cloud Data Protected

Why Should Cloud Data Protection Be Your Top Priority? With the steep rise in digitalization, sensitive data has moved from the physical world into the boundless digital realm. Cloud computing has become a crucial part of this transition, thus ...

7 Must-Have Salesforce Security Practices

Explore the Salesforce security practices that are essential to your business and understand how AppOmni can empower Salesforce customers across industries. The post 7 Must-Have Salesforce Security Practices appeared first on AppOmni. The post 7 ...

Holding Back Salt Typhoon + Other Chinese APT CVEs

Over the past several years, US Federal Agencies and private sector companies have observed China-based threat actors targeting network and telecommunication critical infrastructure. A wave of recent reports have disclosed that these attacks have ...

DEF CON 32 – Using ALPC Security Features To Compromise RPC Services

Authors/Presenters: WanJunJie Zhang, Yisheng He Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention ...

Charges Against CISOs Create Worries, Hope in Security Industry: Survey

A survey of IT security pros by cybersecurity firm BlackFog found that 70% of them said federal cases like that against SolarWinds' CISO hurt their opinion about the position, but some said they expected the boards of directors would take the ...

A SaaS Identity Christmas Carol | Grip Security

Discover a festive twist on SaaS identity risk with our Christmas classic inspired tale. Learn lessons from the ghosts of SaaS past, present, and future. The post A SaaS Identity Christmas Carol | Grip Security appeared first on Security Boulevard.

Mass Breaches in the Age of AI

Targeted Scams & What to do About Them Chris Clements, VP of Solutions Architecture Companies that have suffered massive data breaches are quick to downplay the risks, but they’re ignoring the elephant in the room: the sheer volume of ...

AI Slop is Hurting Security — LLMs are Dumb and People are Dim

Artificial stupidity: Large language models are terrible if you need reasoning or actual understanding. The post AI Slop is Hurting Security — LLMs are Dumb and People are Dim appeared first on Security Boulevard.

2024 Recap: 8 Notable and Dangerous Chrome Vulnerabilities

With a market share of 66.68%, Google Chrome remains a prime target for cyberattacks. In 2024, this widely used browser faced numerous critical Chrome vulnerabilities that put businesses and individuals at risk and led to significant damage. ...

CISA and FCC Issue Urgent Call for Cyber Hardening for Communications Infrastructure

CISA has released new cybersecurity guidelines for communications infrastructure. The guidance comes in the wake of a series of disclosures that massive Telecommunications Carriers have been compromised by Salt Typhoon and other China-sponsored ...

MOVEit Repackaged and Recycled

The largest repackage and re-post of an old leak In November 2024, a hacker known as “Nam3L3ss” allegedly released previously undisclosed data from the MOVEit breach in May 2023. This leak consisted of millions of records, including sensitive ...