Application Security News and Articles


How Data Classification Reduces Insider Threats 

Companies can significantly reduce insider threat risks with a suitable data classification strategy that adequately manages and protects sensitive information.  The post How Data Classification Reduces Insider Threats  appeared first on ...

Human Risk Management: The “Weakest Link” Emerges as Key to Cybersecurity

With technology front and center in virtually all business processes, it may seem counterintuitive to suggest that today’s greatest cybersecurity risks don’t stem from technology, but from people. It’s widely recognized that people pose ...

Zero-Trust in Web3: Redefining Security for Decentralized Systems 

By adopting zero-trust principles, we can build systems that are not only decentralized but also secure, resilient and future-proof.  The post Zero-Trust in Web3: Redefining Security for Decentralized Systems  appeared first on Security Boulevard.

The Avast Phishing Awards: Trickiest email headlines of 2024

2024 has been filled with many ups, downs ... and scams. As we navigate the treacherous waters of the digital realm, let’s take a moment and make note of the tactics behind the phishing emails that graced millions of inboxes across the world ...

Why cybersecurity is critical to energy modernization

In this Help Net Security interview, Anjos Nijk, Managing Director of the European Network for Cyber security (ENCS), discusses cybersecurity in the energy sector as it modernizes with renewable sources and smart grid technologies. Nijk also ...

AI is becoming the weapon of choice for cybercriminals

AI changes how organizations look at cybersecurity GenAI is compromising security while promising efficiency This article highlights key findings from 2024 reports on AI and GenAI technologies, focusing on their potential and major challenges. ...

46% of financial institutions had a data breach in the past 24 months

As the financial industry is the most targeted sector for data breaches in 2024, it’s now more important than ever to strengthen the industry moving into 2025, according to SailPoint. Financial institutions face growing cyber threats In 2024, ...

New infosec products of the week: December 20, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Appdome, GitGuardian, RunSafe Security, Stairwell, and Netwrix. GitGuardian launches multi-vault integration to combat secrets sprawl GitGuardian ...

Navigating the New Era of AI Traffic: How to Identify and Block AI Scrapers

In the not-so-distant past, webmasters faced challenges from bots like Google’s search spiders, which diligently scanned websites to index content and provide the best search results for users. Fast forward to today, and we are witnessing a new ...

Is Your Cloud Infrastructure Truly Protected?

Can You Confidently State Your Cloud Infrastructure is Safe? For businesses harnessing the power of the cloud, the pressing question remains: Can you claim to have absolute assurance of your cloud security? As the rapid adoption of cloud ...

Empower Your Team with Effective Secrets Management

Why is Secrets Management Crucial for Your Cybersecurity Team? Imagine this: your cybersecurity team is overwhelmed with managing countless sensitive codes, tokens, and passwords. Their efficiency is hampered, and this puts your data at a ...

Stay Ahead: Key Tactics in Identity Protection

Why is Identity Protection a Crucial Component of Cybersecurity? As cyber threats grow increasingly complex and sophisticated, organizations face an urgent need to bolster their security architecture. One critical aspect that often gets ...

Master Your Secrets Management: Feel Secure and Confident

Are Vulnerabilities Lurking in Your Secrets Management? In today’s world of high-level cybersecurity, can your organization confidently say it has a secure secrets storage strategy in place? Are you aware of the potential risks and ...

Prevent Cloud Leaks: What Steps Should You Take Now?

The Blind Spot in Traditional Cloud Security Are your cloud security measures stringent enough to prevent a data leak? With the increasing reliance on cloud services, cloud security has become a significant concern for organizations. But, ...

CISO Challenges for 2025: Overcoming Cybersecurity Complexities

As organizations recognize the immense value and criticality of your data and systems, cybersecurity has become intrinsically linked to business strategy. Chief Information Security Officers (CISOs) are increasingly expected to play a central ...

DEF CON 32 – Exploiting Cloud Provider Vulnerabilities for Initial Access

Author/Presenter: Nick Frichette Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the ...

Protecting Your Heart and Wallet: A Guide to Safe Charitable Giving

The holiday season brings out the best in people, with many feeling inspired to support worthy causes. Unfortunately, it also attracts scammers who prey on this generosity. Here’s how to ensure your donations reach legitimate charities while ...

What Is Privilege Escalation? Types, Examples, and Prevention

Privilege escalation is a critical cybersecurity threat in which a user—usually a malicious actor—gains access to data beyond what their account permissions allow. Attackers can gain this access through human error, stolen credentials, or ...

Detection as Code: Key Components, Tools, and More

As software development accelerates, the need to identify threats and respond in real time is greater than ever. Detection as Code (DaC) allows you to write, maintain, and automate your threat detection logic as if it were software code, making ...

Kubernetes Secrets: How to Create and Use Them

Kubernetes, also known as K8s, is a powerful platform for orchestrating containers in complex, distributed environments. Among its many features, Kubernetes has Secrets, which safeguard sensitive information like API keys, passwords, and tokens ...