Application Security News and Articles


Cisco and Rittal Asset Discovery Enhancement

Product Update: Version 4.7 Our latest software release delivers a major upgrade for Cisco and Rittal asset discovery. Enjoy improved detection and tracking of power data in Cisco switches and enhanced environmental sensor recognition in the ...

Demystifying VEX: Simplifying SBOMs with Sonatype SBOM Manager

Ever wondered what VEX really is and why it's crucial for your software supply chain? You're not alone. The post Demystifying VEX: Simplifying SBOMs with Sonatype SBOM Manager appeared first on Security Boulevard.

The 7 Stages of Realizing You Have a Bot Problem

Bots are sneaky, and the signs of a problem are hard to ignore—rising fraud, compromised accounts, and vanishing promotions. Below are seven emotional stages of realizing your bot detection isn’t working and how Kasada can help. The post The ...

DEF CON 32 – Bug Hunting In VMware Device Virtualization

Authors/Presenters: JiaQing Huang, Hao Zheng, Yue Liu Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention ...

Credit Union in U.S. South Supercharges Takedown Campaigns

Do-It-Yourself Takedown Struggles A credit union based in the southern United States supports nearly 28,000 members with total assets of $530M from their headquarters in Alexandria, VA. For a credit union of this size, brand impersonation attacks ...

One Identity Named Winner of the Coveted Top InfoSec Innovator Awards for 2024

Alisa Viejo, California, 5th December 2024, CyberNewsWire The post One Identity Named Winner of the Coveted Top InfoSec Innovator Awards for 2024 appeared first on Security Boulevard.

A Deep Dive into Celery Task Resilience, Beyond Basic Retries

How to make your Celery tasks more resilient with best practices to prevent workflow interruptions and handle various failure scenarios. The post A Deep Dive into Celery Task Resilience, Beyond Basic Retries appeared first on Security Boulevard.

Randall Munroe’s XKCD ‘Advent Calendar Advent Calendar’

via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Advent Calendar Advent Calendar’ appeared first on Security Boulevard.

Splunk SOAR – Sorting Containers to Improve SOAR On-Poll Functionality (Free Custom Function Provided)

Introduction: Splunk SOAR (Security, Orchestration, Automation, and Response) is a very useful tool that can super charge your security operations by giving your security team a relatively easy, low code, automation capability that has great ...

DEF CON 32 – Nano Enigma Uncovering The Secrets In eFuse Memories

Authors/Presenters: Michal Grygarek, Martin Petr Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention ...

Law enforcement shuts down Manson Market cybercrime marketplace

Europol has supported the dismantling of a sophisticated criminal network responsible for facilitating large-scale online fraud. In an operation led by the Hanover Police Department (Polizeidirektion Hannover) and the Verden Public Prosecutor’s ...

Why Zero-Day Attacks Bypass Traditional Firewall Security: Defending Against Zero-Day’s like Palo Alto Networks CVE-2024-0012

Recently, Palo Alto Networks identified and patched a critical zero-day vulnerability in their next-generation firewalls (NGFWs). This vulnerability, tracked as CVE-2024-0012, allowed attackers to execute code on vulnerable devices remotely. This ...

Why Retailers Must Secure Their Payment Data This Golden Quarter

There’s a reason why retailers call the final three months of the year the “golden quarter.” As festive shopping ramps up, many will be hoping to generate a large part of their annual revenue in the period between Black Friday and the end ...

AWS Adds Mutiple Tools and Services to Strengthen Cloud Security

Amazon Web Services (AWS) this week made a bevy of updates to improve cloud security, including additional machine learning algorithms for the Amazon GuardDuty service that make it simpler to detect attack patterns. The post AWS Adds Mutiple ...

Mitek Digital Fraud Defender combats AI generated fraud

Mitek announced Digital Fraud Defender (DFD), an advanced, multi-layered solution to safeguard digital identity verification processes against sophisticated AI-enabled fraud tactics. Designed for financial institutions, fintech, online gaming ...

Mitel MiCollab zero-day and PoC exploit unveiled

A zero-day vulnerability in the Mitel MiCollab enterprise collaboration suite can be exploited to read files containing sensitive data, watchTowr researcher Sonny Macdonald has disclosed, and followed up by releasing a proof-of-concept (PoC) ...

Bitdefender GravityZone XDR enhancements protect business data stored in the cloud

Bitdefender announced enhancements to its GravityZone XDR platform with the addition of its new Business Applications sensor, designed to protect corporate data hosted and stored in cloud-based productivity and collaboration applications. The ...

RACE Conditions in Modern Web Applications

The concept of a RACE condition and its potential for application vulnerabilities is nothing new. First mentioned back in the […] The post RACE Conditions in Modern Web Applications appeared first on Security Boulevard.

Protecting SLED Organizations: How Schools Can Secure Data Against Modern Threats

The post Protecting SLED Organizations: How Schools Can Secure Data Against Modern Threats appeared first on Votiro. The post Protecting SLED Organizations: How Schools Can Secure Data Against Modern Threats appeared first on Security Boulevard.

Metadata of Americans Stolen in Chinese Hack: U.S. Official

The call metadate of a "large number" of Americans was stolen by Chinese state-sponsored Salt Typhoon's hack of eight U.S. telecoms and dozens more around the world, according to U.S. officials, who are scrambling to map out the scope of the ...