Application Security News and Articles


Fortanix protects individual file systems on specified hosts

Fortanix announced a major enhancement to its Fortanix Data Security Manager (DSM): File System Encryption. This new feature complements full disk encryption with the ability to protect individual file systems on specified hosts through ...

Podcast Episode 18: From Application Developer to CEO: Greg Samuels on Entrepreneurial Success and Cybersecurity Priorities

Have you ever wondered what it takes to transition from a routine job to leading a successful company? Join us for a compelling conversation with Greg Samuels, CEO of Salveria, as he shares his extraordinary journey from an application developer ...

A Comprehensive Outlook on OT Asset Inventory Management

Cybersecurity concerns in operational environments have also heightened the importance of asset inventory management. The November 2023 Aliquippa water plant in Pennsylvania cyberattack, which managed to access and shut down a pressure regulation ...

Leveraging OT Asset Inventory for Operational Excellence: The Benefits

To put it in simple words, it’s an all-inclusive catalog of all your hardware, software, and network components. Far from being just a list, this inventory is the backbone of efficient operations, robust security, and smart decision-making. ...

Unleashing the Power of API Security: Join Our API Bites Bootcamp Series

API Security: A 2024 Initiative for All Organizations In the rapidly evolving digital landscape, API security has emerged as a top priority for organizations of all sizes. Protecting your APIs is not just about defense; it’s about staying ahead ...

Survey Surfaces Widespread Mishandling of Sensitive Data

Perforce Software today published a survey of 250 IT professionals that finds the amount of sensitive data residing in non-production environments is rising as organizations embrace artificial intelligence (AI) and digital business ...

0-day in Windows driver exploited by North Korean hackers to deliver rootkit (CVE-2024-38193)

CVE-2024-38193, an actively exploited zero-day that Microsoft patched earlier this month, has been leveraged by North Korean hackers to install a rootkit on targets’ computers, Gen Digital researchers have revealed. About CVE-2024-38193 ...

Vulnerabilities in Microsoft macOS apps may give attackers access to microphone, camera

Vulnerabilities in popular Microsoft apps for macOS can be abused by attackers to record video and audio clips, take pictures, access and exfiltrate data and send emails, Cisco Talos researchers have discovered. Library injection vulnerabilities ...

Overturning of Chevron Deference’s Impact on Cybersecurity Regulation

Season 3, Episode 12: Could the overturning of Chevron Deference impact cybersecurity and privacy regulations? The post Overturning of Chevron Deference’s Impact on Cybersecurity Regulation appeared first on Security Boulevard.

GuidePoint Security releases Phishing as a Service

GuidePoint Security has launched a new Phishing as a Service (PhaaS) offering. Phishing remains one of the most common entry points for threat actors – according to CISA, over 90% of successful cyberattacks start with a phishing email. However, ...

Security Alert: U.S. Political Donation Sites at Risk

As the U.S. election nears, DataDome's assessment shows two-thirds of U.S. donation sites lack adequate bot protection, risking donor data and contributions. The post Security Alert: U.S. Political Donation Sites at Risk appeared first on ...

Multi-Domain vs Wildcard SSL Certificates: Differences & Uses

Digital certificates take many forms but they share the same primary goal: to authenticate a website or server's identity. How this is accomplished will depend on the type of certificate and the level of authentication or protection needed. The ...

That was then, this is now….Modernizing AppSec in Fast-Paced Development Environments

You are the weakest link. Hello.    Ninety-one percent of organizations experienced at least one software supply chain security incident in 2023. Chances are the other 9% are riding their luck: The average organization has nine high, critical ...

Ubuntu Addresses Multiple OpenJDK 8 Vulnerabilities

Several vulnerabilities have recently been identified in OpenJDK 8, which could potentially lead to denial of service, information disclosure, arbitrary code execution, or even the bypassing of Java sandbox restrictions. In response, Canonical ...

NEWS ANALYSIS Q&A: The early going of Generative AI and LLMs impacting cybersecurity

The art of detecting subtle anomalies, predicting emergent vulnerabilities and remediating novel cyber-attacks is becoming more refined, day by day. Related: GenAI’s impact on elections It turns out that the vast datasets churned out by ...

Exploring AI: Regulations and Threat Mitigation

Exploring AI: Regulations and Threat Mitigation josh.pearson@t… Tue, 08/20/2024 - 07:05 It’s something we’ve all heard repeatedly, but it’s a point worth hammering home: AI will shape the future of humanity. This fact is not lost on ...

GoGra Backdoor: Unnamed South Asian Media Outlet Targeted

As per recent reports, an unnamed media organization in South Asia had fallen prey to the GoGra backdoor in November 2023. The threat actor behind the South Asia media organization’s cyber attack is believed to be a part of Harvester, a ...

How to Patch your Linux Kernel before it gets exploited?

Linux Kernel server patch management is essential for ensuring the security, stability, and performance of your server infrastructure. This comprehensive guide covers everything you need to know, from the basics to advanced strategies for ...

Strategies for security leaders: Building a positive cybersecurity culture

Culture is a catalyst for security success. It can significantly reduce cybersecurity risks and boost cybersecurity resilience of any organization. Culture can also greatly enhance the perceived value, relevance and reputation of the ...

AI for application security: Balancing automation with human oversight

In this Help Net Security interview, Kyle Wickert, Worldwide Strategic Architect at AlgoSec, discusses the role of AI in application security, exploring how it’s transforming threat detection and response. Wickert talks about integrating ...