Application Security News and Articles


Secureworks Taegis ManagedXDR Plus enhances cybersecurity for mid-market customers

Secureworks launched Taegis ManagedXDR Plus, a new Managed Detection and Response (MDR) offering that liberates the mid-market from indistinct, cookie cutter security solutions that don’t meet their unique security requirements. This ...

Void Banshee APT exploited “lingering Windows relic” in zero-day attacks

The zero-day exploit used to leverage CVE-2024-38112, a recently patched Windows MSHTML vulnerability, was wielded by an APT group dubbed Void Banshee to deliver malware to targets in North America, Europe, and Southeast Asia, threat hunters with ...

Druva unveils data security capabilities to accelerate incident response

Druva announced new capabilities to help its customers accelerate the investigation and remediation of cyber threats. The new Threat Hunting capability empowers IT and security teams to search their global data footprint for indicators of ...

CSA updates its vendor-neutral cloud security training with CCSK v5 release

The Cloud Security Alliance (CSA) demonstrated its commitment to improving its vendor-neutral cloud security training with the release of the Certificate of Cloud Security Knowledge (CCSK) v5, furnishing cloud stakeholders with the skills they ...

Cequence Integration with F5 High Speed Logging (HSL) Enhances API Security Visibility

Cequence integrates with F5’s High Speed Logging (HSL) solution, providing another zero-latency passive deployment option. This integration enables Cequence to receive and process network traffic directly from the F5 appliance in order to ...

Rezonate boosts security for both human and non-human identities

Rezonate unveiled unified coverage from human to non-human identity security (NHI) with comprehensive capabilities: identity inventory and visibility, security posture, compliance, and identity threat detection and response (ITDR). The platform ...

Three Ways Ox Security Helps You Achieve FedRAMP

Compliance mandates are a fact of life for security teams. There is no shortage of rules and regulations businesses must meet to certify that their organizations are architecting to specified standards for data handling, access controls, testing ...

Harmonic Protect helps security teams secure sensitive data

Harmonic Security launched Harmonic Protect which empowers security teams with the tools to protect sensitive data without the headaches of labeling and complex rules. CISOs using Harmonic have coined it “zero-touch data protection” for its ...

Hotel Wi-Fi: A Hotspot for Cyber Threats

Wi-Fi has become an essential utility, one we expect to access wherever we go. It’s particularly true for hotels, where guests expect seamless internet connectivity – to do their jobs while traveling, to stream entertainment while on ...

Arkose Labs Takes the CISA Pledge

Arkose Labs recently added its name to the list of companies taking the Secure by Design Pledge with the Cybersecurity and Infrastructure Security Agency (CISA). The voluntary pledge focuses on enterprise software products and services, with a ...

Vulnerability Management Lifecycle: The Ultimate Guide to Business Security

63% of organizations suffered cyberattacks due to unpatched vulnerabilities, highlighting a critical issue. However, top-tier companies consistently maintain superior security. How do they do it? Their advantage lies in a robust... The post ...

API Transformation Cyber Risks and Survival Tactics

As you think about how to ensure your APIs are within your risk tolerance, ensure that you have a sound understanding of your inventory and the data associated with them. The post API Transformation Cyber Risks and Survival Tactics appeared first ...

GlobalSign updates ACME service to simplify domain management

GMO GlobalSign announced updates to its Automated Certificate Management Environment (ACME) service for internal domain certificates, enabling customers to issue GlobalSign IntranetSSL certificates through its ACME service. ACME is an internet ...

Story 4: Detecting compromised secrets & naughty 3rd-party vendors

Join Astrix customers as they lead the non-human identity security frontier in this series “The Astrix stories: Real customer wins”. From building an automated process around NHI offboarding, to a collaboration between security and ...

SYS01 info-stealer pushed via Facebook ads, LinkedIn and YouTube posts

Malicious Google ads are a well known threat, but malvertising can also be found on other popular online destinations such as Facebook, LinkedIn, and YouTube. Case in point: an enduring campaign that aims to infect Facebook users with the SYS01 ...

How to Configure Brevo SPF, DKIM, and DMARC Records? A Step-by-Step Guide

Reading Time: 4 min Secure your Brevor domain by configuring Brevo SPF, DKIM, and DMARC records. Improve email deliverability and protect against spoofing and phishing. The post How to Configure Brevo SPF, DKIM, and DMARC Records? A Step-by-Step ...

Craig Boundy joins McAfee as President and CEO

McAfee announced the appointment of Craig Boundy as President and CEO, effective August 21, 2024. Boundy, a seasoned executive with over 25 years of leadership experience, joins McAfee from Experian where he served as the global Chief Operating ...

Patch Squid Vulnerabilities Affecting Ubuntu 16.04/18.04

Several security issues were discovered in Squid, a web proxy cache server. These vulnerabilities have a high severity score and could lead to denial of service or exposure of sensitive information. The good news is that they have been addressed ...

Velvet Ant Exploits Cisco Zero-Day Flaw

Recent events in the cybersecurity landscape have brought to light the activities of a China-nexus cyber espionage group known as Velvet Ant. The threat actor group has been observed exploiting a zero-day flaw in the Cisco NX-OS software. In this ...

How U.S. Businesses can Fight the Deepfake Threat 

While it's unclear how new, advanced technologies like AI and ML will ultimately change the data security landscape, now is not the time to stand still. The post How U.S. Businesses can Fight the Deepfake Threat  appeared first on Security ...