Application Security News and Articles


Why Legit Security Immediately Joined the New Coalition for Secure Artificial Intelligence (CoSAI)

Get details on CoSAI and why Legit chose to be a part of this forum. The post Why Legit Security Immediately Joined the New Coalition for Secure Artificial Intelligence (CoSAI) appeared first on Security Boulevard.

Veza introduces Access AI to streamline risk management and access control

Veza has released Access AI, a generative AI-powered solution to maintain the principle of least privilege at enterprise scale. With Access AI, security and identity teams can now use an AI-powered chat-like interface to understand who can take ...

Critical Docker Engine Flaw Enables Authorization Plugin Bypass

A critical vulnerability was identified in certain versions of Docker Engine that allows attackers to bypass authorization plugins (AuthZ) under specific circumstances. Docker has recently released security updates to address this vulnerability. ...

Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)

Two cross-site scripting vulnerabilities (CVE-2024-42009, CVE-2024-42008) affecting Roundcube could be exploited by attackers to steal users’ emails and contacts, email password, and send emails from their account. About the vulnerabilities ...

AppSOC launches new AI security capabilities for enhanced governance and protection

AppSOC has launched capabilities for safeguarding artificial intelligence (AI) applications and agents while providing the visibility and governance that enterprises need to leverage AI with confidence. Businesses across sectors are recognizing ...

Cequence Unified API Protection defends against attacks targeting AI applications

Cequence introduced advancements to its Unified API Protection (UAP) platform, specifically tailored to support the secure use of AI applications like Generative AI and Large Language Models (LLMs). Cequence’s solutions protect applications ...

Elastic automates SIEM data onboarding with Automatic Import

Elastic is accelerating the adoption of AI-driven security analytics by automating SIEM data onboarding with Automatic Import. This new feature — the only one of its kind for a security analytics or SIEM solution — automates the development ...

D3 enhances Smart SOAR Platform with Ace AI

D3 has announced the release of Ace AI, a collection of new capabilities for D3’s Smart SOAR platform that leverage the power of artificial intelligence to make security operations faster and more intuitive. In a security operations climate ...

Flashpoint Ignite and Echosec deliver threat intelligence for enhanced protection

Flashpoint has released new features and capabilities to its flagship platform, Flashpoint Ignite, and Echosec, its comprehensive location intelligence solution. Those working in security and threat analysis are at the forefront of the constantly ...

Contrast Security ADR enables teams to identify vulnerabilities, detect threats, and stop attacks

Contrast Security introduced Application Detection and Response (ADR), which empowers security teams to identify vulnerabilities, detect threats, and stop attacks that target custom applications and APIs. Today’s layered “detection and ...

Cymulate AI Copilot validates security against real-time threats

Cymulate AI Copilot is a generative AI solution designed to deploy, test and tune security controls to evaluate their effectiveness against real-time threats. The solution offers a dynamic attack planner, among other AI-powered features, for ...

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware

Forescout has published a new report examining the current state of the software supply chain in OT/IoT routers. The study uncovered that OT and IoT cellular routers and those used in small offices and homes contain outdated software components ...

The C-Suite Conundrum: Are Senior Executives the Achilles’ Heel of Cybersecurity?

C-level executives have insights, access and control over privileged company data, systems and finances. Such information and access are highly coveted by cybercriminals, due to their potential for exploitation and illicit gain. The post The ...

Sports venues must vet their vendors to maintain security

Sporting events generate a lot of consumer activity, from hotels and restaurants to retail. Large sporting events are held together by webs of connectivity that include vendors, sponsors, employees, and consumers. These networks connect ...

RustScan: Open-source port scanner

RustScan is an open-source port scanner designed for speed and versatility. It combines a sleek interface with the power to adapt and improve over time. With RustScan’s Adaptive Learning, the tool continually optimizes its performance, ...

AWS’ Mithra Neural Network Detects, Ranks Malicious Domains

AWS details Mithra, its massive neural network graph model that runs on its internal systems and is used to identify and rank malicious domains that threaten the cloud giants systems that hold its customers' data. The post AWS’ Mithra Neural ...

Breaking down FCC’s proposal to strengthen BGP security

In this Help Net Security interview, Doug Madory, Director of Internet Analysis at Kentik, discusses the FCC’s proposal requiring major U.S. ISPs to implement RPKI Route Origin Validation (ROV), and addresses concerns about the impact on ...

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise

Outages, human errors, cyberattacks, data breaches, ransomware, security vulnerabilities, and, as a result, data loss are the reality that DevSecOps teams have to face every few days, according to GitProtect.io. DevSecOps The possibility to ...

How AHEAD Enhanced SecOps Efficiency with Low-code Security Automation

The post How AHEAD Enhanced SecOps Efficiency with Low-code Security Automation appeared first on AI-enhanced Security Automation. The post How AHEAD Enhanced SecOps Efficiency with Low-code Security Automation appeared first on Security Boulevard.

D3 to Introduce “Ace AI”, with AI-Generated Playbooks, at Black Hat USA 2024

Ace AI is a collection of new capabilities for D3’s Smart SOAR™ platform that leverages artificial intelligence to make SecOps faster & intuitive The post D3 to Introduce “Ace AI”, with AI-Generated Playbooks, at Black Hat USA 2024 ...