Application Security News and Articles


Secure by Demand: Going Beyond Questionnaires and SBOMs

CISA’s Secure by Demand guidance provides a list of questions that enterprise software buyers should ask software producers to evaluate their security practices prior to, during and after procurement. It’s a good idea in principle as every ...

In The News | Layered Cybersecurity Approaches: Why Schools Need to Prioritize Them

This article was originally published in IT Business Net on 8/27/24 by Charlie Sander, CEO at ManagedMethods. The cybersecurity landscape has become more and more complex over the years, especially for schools because they are now relying on ...

Prompt Security helps organizations monitor data shared with Microsoft 365 Copilot

Prompt Security launched a security and governance solution for Copilot for Microsoft 365, marking a significant milestone in GenAI Security for enterprise applications. As organizations rapidly adopt GenAI tools to boost productivity and ...

Vulnerability allows Yubico security keys to be cloned

Researchers have unearthed a cryptographic vulnerability in popular Yubico (FIDO) hardware security keys and modules that may allow attackers to clone the devices. But the news is not as catastrophic as it may seem at first glance. “The ...

The True Cost of False Positives: Impact on Security Teams and Business Operations 

False positives are one of the most significant yet often overlooked challenges. When a security alert signals a potential threat that turns out to be benign, security teams are left scrambling to investigate a non-issue. While it may seem like a ...

Proofpoint launches NIST-inspired framework to tackle data loss prevention challenges

Proofpoint launched a proprietary, partner-friendly, end-to-end information protection framework, providing organizations access to expertise, industry benchmark data and proven methodology in designing, implementing and maturing data loss ...

Debian Patches Two Dovecot Vulnerabilities

A recent discovery has exposed critical vulnerabilities in the Dovecot mail server, potentially allowing attackers to exploit the IMAP implementation and disrupt service. These vulnerabilities, identified as CVE-2024-23184 and CVE-2024-23185, can ...

Samba 4.21 comes with upgraded security features

Samba is the standard suite of programs that enables seamless interoperability between Linux/Unix and Windows systems. Version 4.21 has been officially released. Hardening In previous versions of Samba, if a user or group name in either option ...

Bad Reasons to Update Your Linux Kernel

Linux kernel updates often include performance improvements and hardware compatibility. Regular kernel updates are crucial for patching vulnerabilities and protecting your system from cyberattacks. Live patching eliminates the need to reboot the ...

Bluetooth Channel Sounding enhances security of Bluetooth connected devices

The Bluetooth Special Interest Group (SIG), the organization that oversees Bluetooth technology, released Bluetooth Channel Sounding, a new secure, fine-ranging feature that promises to enhance the convenience, safety, and security of Bluetooth ...

Cthulhu Stealer: New macOS Malware Targets Apple Users’ Data

As per recent reports, a new macOS malware, dubbed the Cthulhu stealer, has been discovered by cybersecurity researchers. The information stealer is designed to target macOS hosts and is capable of harvesting a wide range of information. In this ...

Research Identifies Prevalence of Brand Impersonation in Three-Year Cross-Industry Analysis

A frequently asked question in cybersecurity is “What affects me?”. Companies want to know not only what is affecting other companies but what is specifically affecting similar companies in their industry and is therefore likely to affect ...

Rubrik Allies to Cisco to Improve Cyber Resiliency

Rubrik and Cisco have allied to improve cyber resiliency by integrating their respective data protection and extended detection and response (XDR) platforms. The post Rubrik Allies to Cisco to Improve Cyber Resiliency appeared first on Security ...

Protecting national interests: Balancing cybersecurity and operational realities

With cyber threats becoming increasingly sophisticated and targeting critical infrastructure, in this Help Net Security interview, David Ferbrache, managing director of Beyond Blue, discusses the current state of cybersecurity readiness and ...

OpenBAS: Open-source breach and attack simulation platform

OpenBAS is an open-source platform that enables organizations to plan, schedule, and execute crisis exercises, adversary simulations, and breach simulations. Compliant with ISO 22398 standards, OpenBAS is built as a modern web application ...

Cybersecurity jobs available right now: September 4, 2024

Cyber Systems Operations United States Air Force | USA | On-site – View job details The United States Air Force is looking for a Cyber Systems Operations Specialist to design, install, and support systems to ensure they operate ...

Ransomware attacks escalate as critical sectors struggle to keep up

Ransomware remains a concerning cybersecurity threat, with attacks becoming more frequent, severe, and costly. Recent reports highlight alarming trends, including increased attacks on critical sectors like healthcare, education, and ...

Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity

Singapore, Singapore, 4th September 2024, CyberNewsWire The post Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity appeared first on Security Boulevard.

Award Finalist: Contrast Security Application Detection and Response

Less than a month after we at Contrast Security announced Application Detection and Response, it is already a finalist for a major cybersecurity award.  The post Award Finalist: Contrast Security Application Detection and Response appeared first ...

Is Your Business Trusted? The Critical Importance of SOC 2 Readiness in Today’s Industry

Is Your Business Trusted? The Critical Importance of SOC 2 Readiness in Today’s Industry Is Your Business Trusted? The Critical Importance of SOC 2 Readiness in Today’s Industry In an era where data breaches and cyber threats are increasingly ...