Application Security News and Articles


Beyond human IAM: The rising tide of machine identities

Remember when managing user accounts was your biggest headache? Those were simpler times. Today, we’re drowning in a sea of machine identities, and it’s time to learn how to swim – or risk going under. In the ever-expanding universe ...

The cybersecurity workforce of the future requires diverse hiring practices

The global cybersecurity workforce gap reached a new high with an estimated 4.8 million professionals needed to effectively secure organizations, a 19% year-on-year increase, according to ISC2. Despite the growing need for professionals, global ...

MSSPs Say Client Communication Is Too Hard. Here’s How We’re Helping.

We recently published the results of our 2024 MSSP Survey, an exploration of the current state of the managed security services industry, told from the perspective of those on the front lines. The survey unearthed many fascinating insights on ...

After CrowdStrike Crash, Microsoft Mulls New Windows Security Tools

Microsoft is looking to add new security platform features to Windows, including allowing security vendors to operate outside of the OS' kernel to avoid the situation that let a faulty software update by CrowdStrike in July to crash 8.5 million ...

USENIX Security ’23 – AutoFR: Automated Filter Rule Generation for Adblocking

Authors/Presenters:Hieu Le, Salma Elmalaki, Athina Markopoulou, Zubair Shafiq Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating ...

A Personally Identifiable Cyber Jihadist Domain Portfolio

Dear blog readers, The following is a compilation of publicly accessible information on cyber jihad URLs.  Sample domains ...

Point Product vs. CDN for Bot Protection: Striking the Right Balance

There are several pros and cons of point products versus CDNs for bot protection. Learn how DataDome's Cyberfraud Protection Platform strikes a balance between the two to give your business the best protection. The post Point Product vs. CDN for ...

The Intersection Between a Snowden Slide and a Supposedly Malicious MD5

This is from the "correct if I'm wrong but this is publicly accessible information so why shouldn't I take a look at it" department. I've been recently going though Snowden's archive and I came across to my favorite presentation which is on the ...

The Top 7 AlgoSec Alternatives

The Top 7 AlgoSec Alternatives Can AlgoSec Security Management Suite Keep Up with Your Enterprise? Top Enterprise AlgoSec Alternatives What to Look for in an AlgoSec Competitor Enhance Your Enterprise Security Operations with FireMon Get a ...

Randall Munroe’s XKCD ‘Asteroid News’

via the comic & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Asteroid News’ appeared first on Security Boulevard.

Top 5 Enterprise Tufin Competitors

Top 5 Enterprise Tufin Competitors Is Tufin Software the Right Fit for Your Environment? Top Enterprise Tufin Alternatives What to Look for in a Tufin Competitor Enhance Your Enterprise Security Operations with FireMon Get a ...

Harnessing the Power of GRC Software for Enhanced Business Resilience and Compliance

Have you ever tried to fix a leaky faucet only to discover that the whole plumbing system is outdated? I sometimes feel that way about the world of GRC systems.  I remember working with a company that had been using the same IT system for over a ...

Apple Seeks to Drop Its Lawsuit Against Spyware Maker NSO

Apple wants its three-year-old lawsuit against spyware maker NSO to be dismissed, citing the surveillance software maker's declining dominance of the expanding market and fears that its own threat intelligence could be exposed, which would harm ...

Five Tools That Can Help Organizations Combat AI-powered Deception

As digital exploitation, fraud and deception move deeper into society, it is incumbent on organizations to educate their employees on digital literacy skills, make them aware of the risks posed by phishing and social engineering threats. The post ...

CVE-2024-8190: Investigating CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability

On September 10, 2024, Ivanti released a security advisory for a command injection vulnerability for it’s Cloud Service Appliance (CSA) product. Initially, this CVE-2024-8190 seemed uninteresting to us given that Ivanti stated that it was an ...

Why Are So Many Public Sector Organizations Getting Attacked?

Public sector organizations such as schools, hospitals, manufacturing units, essential services and government offices have become a popular target for cybercriminals. The post Why Are So Many Public Sector Organizations Getting Attacked? ...

The Art of Translating Tech: A Guide to Creating Accessible Cybersecurity Content

Cybersecurity shouldn't be shrouded in jargon. This article explores the art of translating tech, empowering you to create accessible cybersecurity content that resonates with audience The post The Art of Translating Tech: A Guide to Creating ...

DORA Compliance Checklist: From Preparation to Implementation

Learn how to navigate the DORA compliance checklist and meet DORA cybersecurity regulation requirements with our step-by-step guide. The post DORA Compliance Checklist: From Preparation to Implementation appeared first on Scytale. The post DORA ...

USENIX Security ’23 – Attacks are Forwarded: Breaking the Isolation of MicroVM-Based Containers Through Operation Forwarding

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

Sourcepoint helps companies mitigate vulnerabilities across various privacy regulations

Sourcepoint announced significant enhancements to its compliance monitoring suite. These solutions are designed to help companies navigate the increasingly complex landscape of digital privacy laws and mitigate risks associated with the growing ...