Application Security News and Articles


Scytale Named Leader in G2’s 2024 Fall Reports 

Scytale named Leader in G2’s 2024 Fall Reports with top spots in Governance, Risk, Compliance & Security Compliance across multiple regions. The post Scytale Named Leader in G2’s 2024 Fall Reports  appeared first on Scytale. The post ...

Post-Quantum Cryptography: Sorting Fact from Fiction

Quantum computing, often touted as the “next big revolution,” is a widely discussed topic in the tech world today. As breakthroughs in quantum research bring us closer to the reality of commercially viable quantum computers, discussions ...

New MIT protocol protects sensitive data during cloud-based computation

Deep-learning models have found applications across various industries, from healthcare diagnostics to financial forecasting. However, their high computational demands often require powerful cloud-based servers. This dependency on cloud computing ...

AI use: 3 essential questions every CISO must ask

In July, Wall Street experienced its worst day since 2022, with the tech-focused Nasdaq falling by 3.6%. The downturn was largely triggered by what commentators suggest is the result of underwhelming earnings from some major tech companies. ...

Compliance management strategies for protecting data in complex regulatory environments

In this Help Net Security interview, Andrius Buinovskis, Head of Product at NordLayer, discusses how organizations can assess their compliance management and ensure they meet regulatory requirements. Buinovskis also addresses the challenges of ...

Rethinking privacy: A tech expert’s perspective

Data privacy has become one of the most pressing challenges of our time, but it didn’t happen overnight. The proliferation of data collection, coupled with the rise of advanced technologies like artificial intelligence and machine learning, ...

Companies mentioned on the dark web at higher risk for cyber attacks

The presence of any data relating to an organization on the dark web demonstrably increases its risk of a cyber attack, according to Searchlight Cyber. Dark web insights and breach correlation Marsh McLennan Cyber Risk Intelligence Center ...

Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #307 – Types of Innovation

via the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink The post Comic Agilé – Mikkel Noe-Nygaard, ...

“Is Your Code a Ticking Time Bomb?”

The Best SAST Tools to Defuse Vulnerabilities Before the Bad Guys Strike! 💣🚀Continue reading on Medium »

Cybercrime Current Events: AWS Takeover Campaign, Ransomware Attack on Columbus, and City of Columbus Sues Ransomware Researcher Whistleblower

There’s so much to keep up with in the world of cybercrime…especially for security practitioners. Leaky Weekly is a bi-weekly podcast hosted by security researcher Nick Ascoli as he dives into the most pressing stories on data leaks, ...

Common Mark Certificates (CMC) for Google BIMI Adoption

Reading Time: 3 min Common Mark Certificates (CMCs) will now allow Gmail senders to display BIMI logos The post Common Mark Certificates (CMC) for Google BIMI Adoption appeared first on Security Boulevard.

Decoding Generative AI’s Privacy Paradox

Take a deep dive into how we at Tonic.ai are thinking about the thorny data safety issues created by generative AI. The post Decoding Generative AI’s Privacy Paradox appeared first on Security Boulevard.

Anonymizing Your Data in Db2 for Better Testing and Development

Creating homegrown de-identified data using scripts might seem like an inexpensive way to get the job done, but it poses a number of challenges, particularly when working with Db2. The post Anonymizing Your Data in Db2 for Better Testing and ...

USENIX NSDI ’24 – ECC: Towards Efficient QUIC Tunneling via Collaborative Transmission Control

Authors/Presenters:Jiaxing Zhang, Furong Yang, Ting Liu, Qinghua Wu, Wu Zhao, Yuanbo Zhang, Wentao Chen, Yanmei Liu, Hongyu Guo, Yunfei Ma, Zhenyu Li Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb ...

City Water Facility in Kansas Hit by Cyberattack

A cyberattack on a water facility in Arkansas City Kansas again raises the concern of CISA and other U.S. agencies about the ongoing threat by bad actors to municipal water systems and other critical infrastructure in the country. The post City ...

PoC for critical SolarWinds Web Help Desk vulnerability released (CVE-2024-28987)

Details about and proof-of-concept (PoC) exploit code for CVE-2024-28987, a recently patched SolarWinds Web Help Desk (WHD) vulnerability that could be exploited by unauthenticated attackers to remotely read and modify all help desk ticket ...

Malwarebytes Personal Data Remover protects user privacy

Malwarebytes introduced its latest consumer product, Personal Data Remover, designed to protect user privacy by assisting users with the deletion of personal information from data broker databases and people search sites. This new solution offers ...

CEO Durov Says Telegram Will Provide More Data to Governments

The CEO of controversial messaging app Telegram says it will now make information about users suspected of crimes more easily available to law enforcement, a move that comes a month after he was arrested in France for allowing such activities on ...

Onapsis expands security for SAP Business Technology Platform

Onapsis announced new capabilities for its flagship solutions, Onapsis Defend and Onapsis Assess, designed to secure the SAP Business Technology Platform (SAP BTP). As more customers adopt SAP S/4HANA cloud and move to RISE with SAP, SAP BTP ...

Baffle Extends Reach to Ecrypt AWS S3 Data as Ingested

Baffle today announced it has developed an ability to automatically encrypt data before it is stored in the Amazon Simple Storage Service (Amazon S3) cloud service. The post Baffle Extends Reach to Ecrypt AWS S3 Data as Ingested appeared first on ...