Application Security News and Articles


Zenity unveils agent-less security solution for Microsoft 365 Copilot

Zenity announced an agent-less security solution for Microsoft 365 Copilot with the Zenity AI Trust Layer. With this product launch, Zenity is continuing to empower its customers to confidently and securely unleash business enablement. Microsoft ...

What is the KEV Catalog?

A quick guide to the Known Exploited Vulnerabilities (KEV) catalog. The post What is the KEV Catalog? appeared first on Security Boulevard.

Permiso Launches Universal Identity Graph to Advance Zero-Trust IT

Permiso today added a Universal Identity Graph engine that makes it simpler for cybersecurity teams to visually map the relationship between individuals, applications and systems to better enforce zero-trust IT policies. The post Permiso Launches ...

Announcing the Trail of Bits and Semgrep partnership

At Trail of Bits, we aim to share and develop tools and resources used in our security assessments with the broader security community. Many clients, we observed, don’t use Semgrep to its fullest potential or even at all. To bridge this gap and ...

Understanding Credential Stuffing Attacks

The firehose of security incidents – data breaches, ransomware, and supply chain attacks – often obscures the methods that attackers use to create these incidents. One of the most common is credential stuffing, which is a type of ...

Aembit Unveils 2024 Survey Report Highlighting Major Gaps in Securing Non-Human Identities

Silver Spring, Maryland, 19th September 2024, CyberNewsWire The post Aembit Unveils 2024 Survey Report Highlighting Major Gaps in Securing Non-Human Identities appeared first on Security Boulevard.

Strata Identity Releases “The Book” on Identity Orchestration for CISOs and Identity Architects

PRESS RELEASE Identity Orchestration For Dummies by tech visionary Eric Olden unlocks the secrets to multi-cloud identity management  BOULDER, CO, Sep. 19, 2024—Strata Identity, the Identity Orchestration company, today announced the ...

Juniper extends AI-Native Networking Platform to maximize the full potential of Wi-Fi 7

Juniper Networks announced several key enhancements to its AI-Native Networking Platform that enable customers and partners to take full advantage of the emerging 802.11be amendment (Wi-Fi 7), which promises higher throughput, lower latency, ...

International Raids Shut Down Ghost Encrypted Messaging App

Europol headed up an international law enforcement operation against the operators and users of Ghost, an encrypted messaging app that was used by criminal organizations worldwide for drug trafficking, money laundering, and threating to kill or ...

Patch this critical Safeguard for Privileged Passwords auth bypass flaw (CVE-2024-45488)

Researchers have released technical details about CVE-2024-45488, a critical authentication bypass vulnerability affecting One Identity’s Safeguard for Privileged Passwords (SPP), which could allow attackers to gain full administrative ...

Picus Security raises $45 million to help organizations reduce cyber risk

Picus Security announced it has closed a $45 million growth investment round led by Riverwood Capital with the participation of existing investor Earlybird Digital East Fund, bringing Picus’ total funds raised to $80 million. Picus has over 500 ...

FBI forced Flax Typhoon to abandon its botnet

A botnet operated by the Chinese state-sponsored threat actor known as Flax Typhoon has been disrupted by the law enforcement agency and abandoned by the group, FBI Director Chris Wray confirmed on Wednesday. “We executed court-authorized ...

Forescout for OT Security secures OT, IoT, and IT hybrid environments

Forescout announced its new SaaS Operational Technologies (OT) solution. Forescout for OT Security is a security solution that allows organizations to secure complex, heterogeneous OT, IoT/IoMT, and IT environments whether they are fully in ...

PowerDMARC Bags Multiple Crozdesk 2024 Awards

Reading Time: 2 min PowerDMARC receives three prestigious Crozdesk 2024 awards, including the Quality Choice, Happiest Users, and Trusted Vendor Awards. The post PowerDMARC Bags Multiple Crozdesk 2024 Awards appeared first on Security Boulevard.

Strivacity AI Assist optimizes digital identity management

Strivacity released Strivacity AI Assist, a new “smart assistant” powered by GenAI that makes it easier to manage and secure digital identities across business-to-business (B2B) and business-to-consumer (B2C) use cases. Building on ...

Tenable Enclave Security enables discovery, assessment and analysis of IT assets

Tenable launched Tenable Enclave Security, a solution that supports the needs of customers operating in highly secure environments, such as those that are classified or otherwise air-gapped. Backed by Tenable Security Center, Tenable Enclave ...

Two QEMU Vulnerabilities Fixed in Ubuntu 24.04 LTS

Recently, two memory-related flaws were discovered in QEMU, a popular open-source machine emulator and virtualizer. The vulnerabilities, identified as CVE-2024-26327 and CVE-2024-26328, affect QEMU versions 7.1.0 through 8.2.1. Both ...

Edera raises $5 million to improve Kubernetes security

Edera announced it has raised $5 million in a seed round led by 645 Ventures and Eniac Ventures with participation from FPV Ventures, Generationship, Precursor Ventures and Rosecliff Ventures. Angel investors include Joe Beda, Filippo Valsorda, ...

Best 10 Regulatory Change Management Software of 2024

Blog: Best 10 Regulatory Change Management Software of 2024 According to a recent KPMG report, 43% of Chief Ethics and Compliance Officers (CCOs) find new regulatory requirements their greatest challenge. To manage these changes effectively, 45% ...

RansomHub Ransomware Targets 210 Victims Since February 2024

As per recent reports, the RansomHub ransomware group threat actors have stolen data from at least 210 victims ever since the group’s inception in February 2024. The victims of these attacks span across various sectors. In this article, we’ll ...