Application Security News and Articles


New infosec products of the week: August 2, 2024

Here’s a look at the most interesting products from the past week, featuring releases from: Adaptive Shield, Fortanix, Clutch Security, Nucleus Security, Wing Security and Synack. Adaptive Shield unveils ITDR platform for SaaS Adaptive Shield ...

Recent Vulnerabilities in Cybersecurity: July 2024 CVE Roundup

Recent cybersecurity vulnerabilities reported on the National Institute of Standards and Technology (NIST)’s National Vulnerability Database pose significant risks to organizations worldwide. Without mitigation, data breaches and system ...

Protect your mini-me—How to prevent child identity theft

Most parents work hard thinking about their little one’s future ahead—imagining it bright and full of possibilities, while doing all they can to protect it. But there may be identity thieves snooping around, looking to target your child and ...

Widespread OTP-Stealing Campaign Targets Android Users

Zimperium researchers discovered a widespread and sophisticated malware campaign dubbed SMS Stealer that's being used against Android device users to steal OTPs from text messages, which can lead to account takeover and ransomware attacks. The ...

Security Risk Advisors Announces Launch of VECTR Enterprise Edition

Philadelphia, United States, 1st August 2024, CyberNewsWire The post Security Risk Advisors Announces Launch of VECTR Enterprise Edition appeared first on Security Boulevard.

Why zero trust is the new gold standard in cybersecurity

Why zero trust is the new gold standard in cybersecurity Why zero trust is the new gold standard in cybersecurity Zero Trust: The Cornerstone of Modern Cybersecurity Zero Trust: The Cornerstone of Modern Cybersecurity The ever-changing digital ...

Fraud in the Travel Industry & How to Prevent It

Fraud in the travel industry can cost your business in direct losses, reputational damage, and negative customer experience. It’s more important than ever for businesses in the travel and hospitality industry to protect themselves and their ...

SENIX Security ’23 – Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs

Authors/Presenters:Hritvik Taneja, Jason Kim, Jie Jeff Xu, Stephan van Schaik, Daniel Genkin, Yuval Yarom Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong ...

Partnering With the National Child Protection Task Force

Empowering the Fight Against Child Exploitation As the CEO of HYAS, I am both honored and privileged to announce our partnership with the National Child Protection Task Force (NCPTF), a 501(c)(3) non-profit organization dedicated to assisting law ...

Google Using Enhanced Encryption to Protect Cookies

Google is adding greater encryption capabilities to Chrome to better protect users from information-stealing malware, a move that comes after the company's controversial decision to once again delay getting rid of third-party cookies. The post ...

Randall Munroe’s XKCD ‘Olympic Sports’

via the comic & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Olympic Sports’ appeared first on Security Boulevard.

Demystifying Github Cached Views – The Hidden Danger

Some explanations about the hidden danger of GitHub features that allow anyone to access commits you thought had been deleted. The post Demystifying Github Cached Views – The Hidden Danger appeared first on Security Boulevard.

Relay Your Heart Away: An OPSEC-Conscious Approach to 445 Takeover

Even within organizations that have achieved a mature security posture, targeted NTLM relay attacks are still incredibly effective after all these years of abuse. Leveraging several of these NTLM relay primitives, specifically ones that require ...

As Breach Costs Surge, Companies Need a Better Way to Find Shadow Data

Data breaches are on the rise. In the US, last year broke new records in terms of breach volumes. The bad news is that costs are also increasing. The latest IBM study reveals that they surged 10% annually to reach nearly $4.9m on average in 2024. ...

Why SAFE. Why Now.

It may feel like beating a dead horse to say it, but the threat of software supply chain attacks is increasing at an alarming rate. And, in fact, it can’t be said too often. Two recent reports illustrate this point: The "2024 Verizon Data ...

USENIX Security ’23 – SHELTER: Extending Arm CCA with Isolation in User Space

Authors/Presenters:Yiming Zhang, Yuxin Hu, Zhenyu Ning, Fengwei Zhang, Xiapu Luo, Haoyang Huang, Shoumeng Yan, Zhengyu He Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations ...

The Enterprise Identity Universe: Users, Non-Humans, and Consumers [Infographic]

2 min read Journey with us through the identity cosmos, where understanding and safeguarding both humans and non-humans is mission-critical. The post The Enterprise Identity Universe: Users, Non-Humans, and Consumers [Infographic] appeared first ...

8 Essential Considerations for Post-Quantum Cryptography Migration

A primer on how to best prepare for the migration to PQC The United Nations has proclaimed 2025 the International Year of Quantum Science and Technology—and for good reason. Across the globe, the quantum community is making monumental strides ...

Strata Identity to Demonstrate How to Modernize Legacy Identity Systems to Microsoft Entra ID at Black Hat 2024

MEDIA ADVISORY Presenters at Microsoft Booth 1240 will also show how Strata’s Maverics  “Disconnected Mode” enables identity continuity and maintains uninterrupted access to apps when internet connectivity is unavailable BOULDER, Colo., ...

Attack Detection and Threat Hunting – Common Topics We’re Asked About

This article is the fifth in a series of five covering key API security topics and provides some answers to common questions we often get when talking to potential customers. The series will cover the following topics: API Discovery API Posture ...