Application Security News and Articles


Balancing AI Performance and Safety: Lessons from PyData Berlin

Would you trust AI to call 911? GitGuardian's ML engineer Nicolas posed this question at PyData Berlin, sparking a discussion on integrating ML into critical systems, debunking AI myths, and balancing innovation with safety in AI deployment. The ...

Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

Kasada named a Strong Performer. Here are some of our own reflections having taken part in this evaluation. The post Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation appeared first on Security Boulevard.

USENIX Security ’23 – LightThief: Your Optical Communication Information is Stolen behind the Wall

Authors/Presenters:Xin Liu, Wei Wang, Guanqun Song, Ting Zhu Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the ...

June Recap: New AWS Sensitive Permissions and Services

As AWS continues to evolve, new services and permissions are frequently introduced to enhance functionality and security. This blog provides a comprehensive recap of new sensitive permissions and services added in June. Our intention in sharing ...

SCYTHE 4.3 enables organizations to test and validate their defenses

SCYTHE has announced SCYTHE 4.3, which brings a host of enhancements designed to support and advance cybersecurity teams’ capabilities in threat emulation, vulnerability management, and security integration. SCYTHE 4.3 new features summary ...

Gearing Up for a New Challenge: OT & IoT Security in the Automotive Industry

The automobile industry is increasingly becoming a target for cyber-attacks as vehicles evolve into sophisticated, connected systems. This transformation introduces vulnerabilities at multiple levels, from manufacturing processes to the vehicles ...

What is the Role of Explainable AI (XAI) In Security?

While AI helps automatically detect and respond to rapidly evolving threats, XAI helps security professionals understand how these decisions are being made. The post What is the Role of Explainable AI (XAI) In Security? appeared first on Security ...

The Urgent Need for Digital Executive Protection: A CEO’s Perspective

The role of the CEO and the entire C-suite extends far beyond the traditional boardroom. Executives are constantly connected, managing critical business operations, and making decisions that shape the future of our companies. As we navigate cyber ...

Does the GDPR Really Say That? Clearing Up Common Misunderstandings

Despite extensive information available about the GDPR, many misconceptions still persist. This blog breaks down some of them.  The post Does the GDPR Really Say That? Clearing Up Common Misunderstandings appeared first on Scytale. The post Does ...

Model Extraction from Neural Networks

A new paper, “Polynomial Time Cryptanalytic Extraction of Neural Network Models,” by Adi Shamir and others, uses ideas from differential cryptanalysis to extract the weights inside a neural network using specific queries and their results. ...

Google to distrust Entrust SSL/TLS certificates: What this means for the industry

In a significant move to enhance digital certificate security, Google has announced its decision to distrust all public SSL certificates issued by Entrust, effective after October 31, 2024. The post Google to distrust Entrust SSL/TLS ...

5 New Features that Streamline Security and Compliance with LogRhythm Axon

The output of a security and information event management (SIEM) platform is only as good as the data that is feeding into it. “Garbage in, garbage out,” as they say. Clean and contextualized data is the foundation of accurate security… The ...

Expand Log Source Collection and Flexibility with LogRhythm 7.17

Behind every LogRhythm product release, our team puts customers at the very core. That’s part of our commitment to you every 90 days. In our ninth consecutive quarterly release, we’ve opened LogRhythm SIEM to allow any JSON agent that ...

Benefits of JSON Log Source Collection for LogRhythm Customers

When it comes to log sources, LogRhythm recognizes there are limitless options. After all, more than 30,000 Softwares as a Service (SaaS) companies exist around the globe. While we can’t keep up with every SaaS tool in the market, ...

LogRhythm’s Machine Data Intelligence Fabric Empowers AI-Ready Organizations to Enter the Modern Era with Confidence

LogRhythm, the company helping security teams stop breaches by turning disconnected data and signals into trustworthy insights, today announced its 9th consecutive quarterly release. In the AI-ready world, LogRhythm empowers security teams with ...

Cyber Trust Mark: The Impacts and Incentives of Early Adoption

The Cyber Trust Mark is a labeling initiative for consumer IoT devices in the United States that builds on work undertaken by the FCC and NIST, establishing data privacy and cybersecurity standards for connected devices. The post Cyber Trust ...

Static Application Security Testing using “semgrep”

Static Application Security Testing (SAST) is an essential part of modern software development. It helps developers identify…Continue reading on Medium »

Cybersecurity Workforce Sustainability has a Problem. DEI Could be the Solution.

As employers scramble to find or train security talent, organizations that ignore the inclusive approach may weaken their competitive posture in the battle for talent and overall security. The post Cybersecurity Workforce Sustainability has a ...

New Tech Q&A: Adaptiva – CrowdStrike alliance highlights trend of blending IT and security systems

The coalescing of the next-gen security platforms that will carry us forward continues. Related: Jump starting vulnerability management Adaptiva, a leader in autonomous endpoint management, recently announced the launch of OneSite Patch for ...

Remote Rigor: Safeguarding Data in the Age of Digital Nomads

Digital nomads go where the wind takes them around the globe, often working from coffee shops, co-working locations or public libraries. They rely on connecting to their work life via their mobile hotspot or public wi-fi connections. The post ...