Application Security News and Articles


Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense

In this Help Net Security, Erica Banks, VP and a leader in Booz Allen’s civilian services business, discusses the Federal Cybersecurity Strategy’s role in safeguarding national assets. Banks outlines key areas for improvement, including ...

Benefits and best practices of leveraging AI for cybersecurity

AI has become a key player in protecting valuable organizational insights from threats. Thanks to AI-enabled data protection practices such as behavior monitoring, enterprises no longer have to be reactive to a cyberattack but can be proactive ...

Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences

Torrance, United States / California, 12th September 2024, CyberNewsWire The post Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences appeared first on Security Boulevard.

Internal disconnects vs. cybersecurity: How connectivity shapes challenges

Concerns about the trustworthiness of internal data exist in nearly all organizations globally, according to TeamViewer. 99% of business leaders pointed to factors undermining trust in internal data, citing multiple versions of the truth (38%), ...

NSFOCUS Recognized in Eight Security Innovations in the Gartner® Hype Cycle™ for Security in China, 2024 Report

Gartner® has recently unveiled its Hype Cycle for Security in China, 2024 and NSFOCUS has been recognized as a Sample Vendor across eight security innovations. We believe this is a testament to NSFOCUS’s commitment to innovation and its role ...

Imperva Protects Against Critical Apache OFBiz Vulnerability (CVE-2024-45195)

Recently, a critical vulnerability in the widely used Apache OFBiz framework was disclosed, designated CVE-2024-45195. This vulnerability allows for unauthenticated remote code execution (RCE), making it an especially dangerous flaw for ...

5 Stages of Shadow IT Grief | Grip

Shadow IT grief: where seemingly minor SaaS oversights can turn into major risks, leaving your company exposed. Don’t let shadow IT derail your SaaS security. The post 5 Stages of Shadow IT Grief | Grip appeared first on Security Boulevard.

800% Growth: LLM Attacker Summaries a Hit with Customers

We are excited to share the tremendous response to our Large Language Model (LLM) attacker summary feature. Since its launch, usage has increased by an amazing 800%, demonstrating its significant impact on our customers' daily operations. An ...

Vulnerability handling requirements for NIS2 compliance

In a previous blog post, we covered two foundational elements of the Network and Information Security (NIS2) Directive, software supply chain security and reporting requirements. In this blog, we take a closer look at the types of organizations ...

FFIEC Will Sunset the Cybersecurity Assessment Tool: Everything You Need to be Prepared

The Federal Financial Institutions Examination Council (FFIEC) has officially announced that its Cybersecurity Assessment Tool (CAT) will phase out by August 31, 2025. Launched in June 2015, the CAT has helped financial institutions assess and ...

USENIX Security ’23 – Differential Testing of Cross Deep Learning Framework APIs: Revealing Inconsistencies and Vulnerabilities

Authors/Presenters:Zizhuang Deng, Guozhu Meng, Kai Chen, Tong Liu, and Lu Xiang, Chunyang Chen Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

Customer Story | Protecting Students and Data in Google Workspace at Santa Rita Union School District

Santa Rita USD’s IT Team Partners with ManagedMethods to Improve Google Security and Safety Santa Rita Union School District in Salinas, CA, serves about 3,200 students and employs approximately 350 faculty and staff. As the district embraced ...

New Findings on the National Public Data Breach: Poor Security Measures and the Role of Infostealer Malware as a Possible Vector of Attack 

In recent months, the National Public Data (NPD) breach has been a topic of intense scrutiny, with cybersecurity experts like Brian Krebs highlighting the poor security practices that contributed to the breach’s magnitude. As we continue to ...

Kali Linux 2024.3 released: 11 new tools, Qualcomm Snapdragon SDM845 SoC support

Kali Linux 2024.3 is now available for download. Besides the new tools, this release mainly focuses on behind-the-scenes updates and optimization. New tools in Kali Linux 2024.3 This Kali release is about new tools and package updates: goshs ...

Microsoft Fixes Four 0-Days — One Exploited for SIX YEARS

Week B: Bugs begone! This month Redmond fixes 79 security flaws in Windows and other products The post Microsoft Fixes Four 0-Days — One Exploited for SIX YEARS appeared first on Security Boulevard.

In Memoriam: 9/11 Victims

Permalink The post In Memoriam: 9/11 Victims appeared first on Security Boulevard.

Understand Blocked Requests Faster with Rule Tracing | Impart Security

Introducing Rule Tracing We're excited to announce the release of Rule Tracing, a powerful new feature in Impart Security that provides clear visibility into which specific security rule triggered a blocking decision. This feature enables ...

Can AI Help Fix Security Vulnerabilities?

We get a lot of questions from our customers around the topic of artificial intelligence in combination with SAST (Static Application Security Testing). Everybody is looking for the next level of efficiency around DevSecOps. With CodeSonar the ...

How to Handle Secrets in Go

Learn the best practices for handling secrets in Go in the cloud-native ecosystem. The post How to Handle Secrets in Go appeared first on Security Boulevard.

A Webinar Recap: The FCC Schools and Libraries Cybersecurity Pilot Program

Recently, we hosted a live webinar that discusses everything you need to know about the FCC School and Libraries Cybersecurity Pilot Program. This webinar outlines an overview of the new program, discusses why securing Google Workspace and/or ...