Application Security News and Articles


Phishing Attacks: Google Drawings And WhatsApp Scam Alert

Cybersecurity researchers at Menlo Security have recently uncovered phishing attacks leveraging Google Drawings and shortened links generated through WhatsApp. The aim of such an attack methodology is to evade detection and trick users into ...

A Fresh Look at Embedded Java

Azul customers use Java on embedded platforms for in-car infotainment and information displays, home automation, and the list goes on. The post A Fresh Look at Embedded Java appeared first on Azul | Better Java Performance, Superior Java ...

The Golden Age of Impersonation: The Dual Role of AI in Cyber Attacks & Cyber Defense    

Attacks today can be executed through a myriad of communication channels, including emails, social media and mobile applications.   The post The Golden Age of Impersonation: The Dual Role of AI in Cyber Attacks & Cyber Defense     ...

3 Cybersecurity Trends for 2025 

By staying informed about emerging cybersecurity trends and investing in robust security measures, organizations can enhance their resilience against cyberattacks.  The post 3 Cybersecurity Trends for 2025  appeared first on Security Boulevard.

Palo Alto Networks Shines Light on Application Services Security Challenge

An analysis published by Palo Alto Networks finds a typical large organization adds or updates over 300 services every month, with those new and updated services being responsible for approximately 32% of new high or critical cloud exposures. The ...

A survival guide for data privacy in the age of federal inaction

Things change fast in the world of data privacy. Just earlier this year, the question I was being asked most frequently was, “How similar will the proposed federal privacy law (APRA) be to the EU’s GDPR?” Now that APRA is pretty much dead ...

Most ransomware attacks occur between 1 a.m. and 5 a.m.

There’s been an alarming increase in ransomware attacks over the past year, alongside significant shifts in the tactics and strategies employed by cybercriminals that underscore the necessity for organizations to implement around-the-clock ...

Why C-suite leaders are prime cyber targets

Senior executives are prime targets for cybercriminals, with 72% of surveyed cybersecurity professionals in the US reporting that cyberattacks have targeted this group in the past 18 months. This trend, highlighted in GetApp’s 2024 Executive ...

GenAI models are easily compromised

95% of cybersecurity experts express low confidence in GenAI security measures while red team data shows anyone can easily hack GenAI models, according to Lakera. Attack methods specific to GenAI, or prompt attacks, are easily used by anyone to ...

WAF Cloud Authentication Issue Troubleshooting

If the virtual product uses cloud authentication, it needs to communicate with the cloud authentication center periodically every day to complete the authentication and ensure availability. You can confirm the authorization mode under System ...

The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence?

Learn about the hidden security gaps in your SaaS apps and what you can do to ensure you’re conducting the due diligence to mitigate these risks and protect the data in your organization. The post The Hidden Security Gaps in Your SaaS Apps: Are ...

The Great Cloud Security Debate: CSP vs. Third-Party Security Tools

Do I go to my Cloud Service Provider (CSP) for cloud security tooling or to a third party vendor? Who will secure my cloud use, a CSP or a focused specialty vendor? Who is my primary cloud security tools provider? This question asked in many ...

Mastering Cloud Security: Uncovering Hidden Vulnerabilities with NodeZero™

Master cloud security with NodeZero™ Cloud Pentesting. Easily uncover vulnerabilities across AWS and Azure, prioritize identity risks, and secure your environment in just minutes. Stay ahead of threats. The post Mastering Cloud Security: ...

USENIX Security ’23 – Access Denied: Assessing Physical Risks To Internet Access Networks

Authors/Presenters:Alexander Marder, Zesen Zhang, Ricky Mok, Ramakrishna Padmanabhan, Bradley Huffaker, Matthew Luckie, Alberto Dainotti, kc claffy, Alex C. Snoeren, Aaron Schulman Many thanks to USENIX for publishing their outstanding USENIX ...

Backdoor in RFID Cards for Offices, Hotels Can Lead to Instant Cloning

A backdoor found in millions of Chinese-made RFID cards that are used by hotels and other businesses around the world can let bad actors instantly clone the cards to gain unauthorized access into rooms or run supply chain attacks, say researchers ...

2024 Identity Breach Report: Navigating the GenAI Attack Revolution

The cybersecurity landscape is rapidly evolving, and our 2024 Identity Breach Report: Welcome to the GenAI Attack Revolution offers essential insights into how artificial intelligence (AI) and complex data sets are transforming the threats we ...

Gartner Report: Implement a Continuous Threat Exposure Management (CTEM) Program

Learn more about the top challenges and the different tools and techniques that can support continuous validation within a CTEM program. The post Gartner Report: Implement a Continuous Threat Exposure Management (CTEM) Program appeared first on ...

How CTI Analysts Use Threat-Informed Defense to Overcome Top Challenges

Recently, I introduced you to our heroes of Threat-Informed Defense. They comprise our diverse community of Tidal Cyber customers who are using our platform in ways you may not have thought about to save time and money, improve their existing ...

Enhance Your Identity Governance and Administration Strategy

Improve your identity and governance administration strategy with SaaS identity risk management. Discover how to extend the value of your IGA tool. The post Enhance Your Identity Governance and Administration Strategy appeared first on Security ...

Randall Munroe’s XKCD ‘Ferris Wheels’

via the comic & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Ferris Wheels’ appeared first on Security Boulevard.