Application Security News and Articles


The Cyber Fallout: Navigating the Aftermath of a Credit Union Breach

The post The Cyber Fallout: Navigating the Aftermath of a Credit Union Breach appeared first on Votiro. The post The Cyber Fallout: Navigating the Aftermath of a Credit Union Breach appeared first on Security Boulevard.

One Does Not Simply … Get a Cybersecurity Job

Where to Begin With thousands of unfilled positions reported year over year, why is it so hard to get a […] The post One Does Not Simply … Get a Cybersecurity Job appeared first on Security Boulevard.

Building Trustworthy AI: Contending with Data Poisoning

Nisos Building Trustworthy AI: Contending with Data Poisoning As Artificial Intelligence (AI) and Machine Learning (ML) systems are adopted and integrated globally, the threat of data poisoning attacks remains... The post Building Trustworthy AI: ...

Democratizing Defense: AttackIQ Flex 2.0 Empowers Every Organization

Revolutionizing security testing with continuous security validation. The post Democratizing Defense: AttackIQ Flex 2.0 Empowers Every Organization appeared first on AttackIQ. The post Democratizing Defense: AttackIQ Flex 2.0 Empowers Every ...

Rat Traps: Emulating AsyncRAT with AttackIQ Flex

In the ultramodern, mercurial sphere of cybersecurity, somehow a 1700-year-old quote from Helena of Constantinople still deeply resonates. Even with seemingly robust defenses, the smallest vulnerability can be an open invitation for threats like ...

Cado platform enhances SOC efficiency with AI-driven workflow automation

Cado Security has unveiled that the Cado platform now enables customers to dramatically streamline the effectiveness of their SOC using end-to-end workflow investigation automation capabilities. Through the infusion of AI-guided investigations ...

Applying Vulnerability Management to Zero Trust: Insights from Fortra’s Tyler Reguly

Season 3, Episode 11: Vulnerability management is critical to any Zero Trust strategy, but you probably already know that. Fortra’s Tyler Reguly breaks down severity vs. risk. The post Applying Vulnerability Management to Zero Trust: Insights ...

Securing Artifacts: Keyless Signing with Sigstore and CI/MON

Artifact integrity is crucial in maintaining software security and trustworthiness. High-profile breaches like SolarWinds, CodeCov, 3CX, and JumpCloud have shown how altering artifact contents can lead to significant security vulnerabilities, ...

kvmCTF: Google’s $250K Bounty for KVM Zero-Day Vulnerabilities

In October 2023, Google announced the launch of kvmCTF, a new vulnerability reward program (VRP) designed to improve the security of the Kernel-based Virtual Machine (KVM) hypervisor. This innovative program comes with bounties of up to $250,000 ...

Synack PTaaS platform offers complete security testing suite

Synack has unveiled additional capabilities of its Penetration Testing as a Service (PTaaS) platform that deliver a comprehensive security testing experience. The Synack platform now covers all customers’ security testing needs, from attack ...

Insider Risk Digest: July

This Article Insider Risk Digest: July was first published on Signpost Six. | https://www.signpostsix.com/ Welcome to this month’s Insider Risk Digest. This month, we explore a range of insider threats affecting sectors from government to ...

Wing Security unveils custom SaaS Threat Intelligence for direct dashboard integration

Wing Security launched its new tailored SaaS Threat Intelligence, providing organizations with personalized detection and response capabilities directly integrated into their SaaS security dashboard. The threat intelligence feature delivers ...

Nucleus Vulnerability Intelligence Platform enhances threat assessment and remediation speed

Nucleus Security has launched its Nucleus Vulnerability Intelligence Platform. Nucleus Vulnerability Intelligence Platform enables enterprises to aggregate, analyze, and act on insights from government, open-source, and premium threat ...

Black Hat Fireside Chat: Consumers demand secure mobile apps; it’s high time for brands to deliver

Two-plus decades of enduring wave after wave of mobile app malware and fraud has finally taken its toll on users. Now comes a global survey from Appdome and OWASP that reveals the vast majority of consumers are fed up. I … (more…) The post ...

Best 5 SOC 2 Compliance Software in 2024

If you’ve landed here, chances are you know just how challenging getting SOC 2 certification can be. Dealing with manual processes, spreadsheets, and endless piles of documentation can feel like a never-ending battle.  I get it—it’s ...

LockBit Ransomware: Two Russians Plead Guilty For Attacks

As per recent media reports, two Russian nationals have pleaded guilty in a United States (US) court for affiliate participation in the LockBit ransomware attacks. The two individuals part of the LockBit ransomware scheme have been identified as ...

Stay Safe Online: 5 Essential Tips for World Wide Web Day

Stay Safe Online: 5 Essential Tips for World Wide Web Day josh.pearson@t… Thu, 08/01/2024 - 07:00 World Wide Web Day is celebrated each year on the first of August, marking the day the Internet was first made available to the public in 1991. ...

Threat intelligence: A blessing and a curse?

Access to timely and accurate threat intelligence is now core to security operations for many organizations. Today, it seems that security teams are blessed with an abundance of data and intelligence feeds to choose from. However, selecting the ...

How SquareX is Redefining Web Security: An In-Depth Discussion with Chief Architect Jeswin Mathai

In this episode, Tom Eston hosts Jeswin Mathai, Chief Architect at SquareX. This episode is part two of a series featuring SquareX, and Jeswin takes a deeper look into their cybersecurity solutions. Jeswin shares his extensive experience in the ...

Why CISOs face greater personal liability

In this Help Net Security interview, Christos Tulumba, CISO at Veritas Technologies, discusses the key factors contributing to increased personal liability risks for CISOs. These risks are driven by heightened cybersecurity threats, evolving ...