Application Security News and Articles


Open source maintainers: Key to software health and security

Open source has become the foundation of modern application development, with up to 98% of applications incorporating open-source components and open-source code accounting for 70% or more of the typical application. In this Help Net Security ...

Businesses turn to private AI for enhanced security and data management

In this Help Net Security interview, Joe Baguley, CTO EMEA at Broadcom, shares insights on private AI and its significance in data security. He explains how it helps organizations maintain control over sensitive information while addressing the ...

The most common authentication method is also the least secure

Despite the rise in cyber threats, many people do not have a holistic view of security, according to Yubico. The results of the survey uncovered concerning patterns and behaviors when it comes to personal and workplace cybersecurity, including ...

How AI-Enabled Cybersecurity Solutions Are Strengthening Our Online Security

CIAM gets a major upgrade with AI, which secures customer identities, streamlines access, and ensures only the right people get in. But we can't just set it and forget it. Discover why AI is a game changer, key applications in the field, and what ...

USENIX NSDI ’24 – The Bedrock of Byzantine Fault Tolerance: A Unified Platform for BFT Protocols Analysis, Implementation, and Experimentation

Outstanding Paper Award Winner! Authors/Presenters:Mohammad Javad Amiri, Chenyuan Wu, Divyakant Agrawal, Amr El Abbadi, Boon Thau Loo, Mohammad Sadoghi Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb ...

Week in review: Windows Server 2025 gets hotpatching option, PoC for SolarWinds WHD flaw released

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Windows Server 2025 gets hotpatching option, without reboots Organizations that plan to upgrade to Windows Server 2025 once it becomes generally ...

Remote Code Execution Vulnerability Alert of Unix CUPS Print Service (CVE-2024-47076 / CVE-2024-47175 / CVE-2024-47177)

Overview Recently, NSFOCUS CERT monitored the disclosure of the details of remote code execution vulnerabilities for Unix CUPS printing service on the Internet. When the system enables cups-browsed process listening (default port 631) to receive ...

Over 300,000! GorillaBot: The New King of DDoS Attacks

Overview In September 2024, NSFOCUS Global Threat Hunting System monitored a new botnet family calling itself Gorilla Botnet entering an unusually active state. Between September 4 and September 27, it issued over 300,000 attack commands, with a ...

CUPS: Unraveling a Critical Vulnerability Chain in Unix Printing Systems

A series of critical vulnerabilities has been uncovered in the Common Unix Printing System (CUPS), specifically in the The post CUPS: Unraveling a Critical Vulnerability Chain in Unix Printing Systems appeared first on ARMO. The post CUPS: ...

USENIX NSDI ’24 – SwiftPaxos: Fast Geo-Replicated State Machines

Authors/Presenters:Fedor Ryabinin, Alexey Gotsman, Pierre Sutra Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, ...

When Is ISO 27001 Considered Mandatory? 5 Examples

ISO 27001 is the international standard for information security and protection. It’s roughly equivalent to similar infosec frameworks in the United States, like FedRAMP and CMMC, but the international development, maintenance, and scope of the ...

Locked In – The Cybersecurity Event of the Year

  This is how to redefine CISO events! I had a spectacular time at the “Locked In — The Cybersecurity Event of the Year!” Organized by Rinki Sethi and Lucas Moody, it was nothing short of epic! Forget long boring sessions and tracks, ...

How Long Does it Take You to Successfully Identify Phishing Emails?

The post How Long Does it Take You to Successfully Identify Phishing Emails? appeared first on AI-enhanced Security Automation. The post How Long Does it Take You to Successfully Identify Phishing Emails? appeared first on Security Boulevard.

The Kaseya Advantage: 10 Years and $12B in the Making

In today’s rapidly evolving IT and security management landscape, competitive advantage is an MSP’s golden ticket to success. That’s whyRead More The post The Kaseya Advantage: 10 Years and $12B in the Making appeared first on Kaseya. The ...

When Innovation Outpaces Financial Services Cybersecurity

Financial services face growing risks from shadow IT and SaaS usage. Learn how SaaS identity risk management helps secure data and ensure regulatory compliance. The post When Innovation Outpaces Financial Services Cybersecurity appeared first on ...

Unlocking Deeper Visibility and Control Over SaaS Risks

Discover how to mitigate SaaS risks like shadow SaaS and unmanaged identities with Grip Extend, an advanced suite of features powered by a browser extension. The post Unlocking Deeper Visibility and Control Over SaaS Risks appeared first on ...

USENIX NSDI ’24 – Harmony: A Congestion-free Datacenter Architecture

Authors/Presenters:Saksham Agarwal, Qizhe Cai, Rachit Agarwal, David Shmoys, Amin Vahdat Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and ...

“Hacking” an Election is Harder Than You Think – But Security is Still a Priority  

By understanding attackers’ true goals, prioritizing transparency, and winning the optics battle, election officials can help keep the process secure and avoid losing the faith of the electorate. The post “Hacking” an Election is Harder ...