Application Security News and Articles


Top November Attacks | Contrast ADR Attack Data | Contrast Security

Attackers targeted applications and application programming interfaces (APIs) with an average of 50 confirmed attacks per app in the month of November 2024. That’s down from the previous month, but an alarming number of attacks continue to ...

DEF CON 32 – Digital Emblems-When Markings Are Required, But You Have No Rattle-Can

Authors/Presenters: Bill Woodcock Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the ...

Websites and HIPAA: Navigating Online Tracking Technologies

Today, healthcare providers, insurers, and other HIPAA-covered entities are increasingly relying on websites to share information, engage with patients, and streamline operations. While websites offer numerous benefits, it’s crucial to ...

How Should OT Companies Measure Cyber Risk? | ARIA Cybersecurity

The ARIA Cybersecurity team had a hugely productive week in Anaheim, California at the recent 2024 Rockwell Automation Fair. The event was a fantastic opportunity to make connections with companies from across different industries. They all ...

Randall Munroe’s XKCD ‘Seismologists’

Permalink The post Randall Munroe’s XKCD ‘Seismologists’ appeared first on Security Boulevard.

Flare Raises $30M Series B Led by Base 10 Partners to Continue Growth in Security Intelligence and Threat Exposure Management Markets

Today, we at Flare announced our USD $30M Series B Round led by Base10 Partners with participation from Inovia Capital, White Star Capital, and Fonds de solidarité FTQ.  We have raised CAD $9.5M to this point, and plan for this fresh round of ...

Is crypto safe? What to know before investing in digital currencies

The digital currency market is booming, and as security professionals, we must address the crucial question: Is crypto safe?  Following the re-election of former President Donald The post Is crypto safe? What to know before investing in digital ...

The Growing Threat of E-Skimming: Why March 2025’s PCI Deadline Matters

by Source Defense The landscape of payment security is at a critical turning point. As we approach the March 31, 2025 PCI compliance deadline for implementing new e-skimming controls, organizations face mounting pressure to address what has ...

Resecurity introduces Government Security Operations Center (GSOC) at NATO Edge 2024

Los Angeles, USA, 11th December 2024, CyberNewsWire The post Resecurity introduces Government Security Operations Center (GSOC) at NATO Edge 2024 appeared first on Security Boulevard.

News alert: DMD Diamond invites developers to participate in open beta for its v4 blockchain

Vienna, Austria, Dec. 11, 2024, CyberNewswire — DMD Diamond, one of the oldest blockchain projects in the space, has announced the start of Open Beta for the DMD Diamond v4 blockchain. Established in 2013, DMD Diamond is recognized as … ...

Oasis Security Details MFA Security Flaw Found in Microsoft Cloud Services

Oasis Security today revealed that it worked with Microsoft to fix a flaw in its implementation of multi-factor authentication (MFA) that could have been used by cybercriminals to gain access to every major Microsoft cloud service The post Oasis ...

Top Tool Capabilities to Prevent AI-Powered Attacks

Recent advances in AI technologies have granted organizations and individuals alike unprecedented productivity, efficiency, and operational benefits. AI is, without question, the single most exciting emerging technology in the world. However, it ...

Auditing the Ruby ecosystem’s central package repository

This is a joint post with the Ruby Central team. The full report, which includes all of the detailed findings from our security audit of RubyGems.org, can be found here. Ruby Central hired Trail of Bits to complete a security assessment and a ...

DMD Diamond Launches Open Beta for v4 Blockchain Ahead of 2025 Mainnet

Vienna, Austria, 11th December 2024, CyberNewsWire The post DMD Diamond Launches Open Beta for v4 Blockchain Ahead of 2025 Mainnet appeared first on Security Boulevard.

New CISA Hardening Guidance Provides Valuable Insights for Network Security Engineers

Recent guidance from CISA and the FBI highlights best practices to monitor and harden network infrastructure. The guidance, published in response to high-profile attacks on telecom infrastructure, is applicable to a wider audience. This blog ...

Understanding and Taking Advantage of the NYDFS Risk Assessment Requirement

As organizations prepare for the coming year those affected by NYDFS may struggle to efficiently include the requirements in their […] The post Understanding and Taking Advantage of the NYDFS Risk Assessment Requirement appeared first on ...

U.K. cybersecurity chief warns of gap between risks and defenses

A warning issued by the new head the United Kingdom's National Cyber Security Centre (NCSC) should be sobering to cybersecurity pros everywhere. Speaking at the agency's headquarters on Tuesday, Richard Horne declared that the cyber-risks faced ...

AMD Chip VM Memory Protections Broken by BadRAM

Researchers in Europe unveil a vulnerability dubbed "BadRAM" that hackers can easily exploit using $10 hardware to bypass protections in AMD's Eypc server processors used in cloud environments and expose sensitive data stored in memory. The post ...

2025 Software Manufacturing Predictions: SBOMs, Regulations, and More

As we head into 2025, experts weigh in on trends affecting software products in the medical, vehicle, and energy sectors. They also talk about manufacturer readiness for the EU Cyber Resilience Act, and other legislation coming their way. Below, ...