Application Security News and Articles


Cofense enhances PhishMe to identify engagement and resilience gaps across all employee levels

Cofense unveiled new enhancements to its PhishMe Employee Security Awareness Training (SAT) Platform. The latest addition, Employee Engagement Index, is set to transform how organizations manage email security risks. The introduction of the ...

Cofense Adds Email Security Risk Management and Validation Reporting to PhishMe®

The New Employee Engagement Index empowers employees; making them security allies, not liabilities. LEESBURG, Va. – June 26, 2024 – Cofense®, the leader in email threat detection and response solutions, today unveiled new enhancements to its ...

ARMO launches behavioral-based cloud detection and response

ARMO announced its new ARMO Cloud Detection & Response solution, providing robust security for workloads. This new offering addresses the residual threats that may persist during runtime, even after thorough scanning during development and ...

The Check Point Challenge: Safeguarding Against the Latest CVE

The post The Check Point Challenge: Safeguarding Against the Latest CVE appeared first on Votiro. The post The Check Point Challenge: Safeguarding Against the Latest CVE appeared first on Security Boulevard.

Prioritizing Exposures vs. Prioritizing Actions 

Organizations face an overwhelming number of vulnerabilities and threats. The traditional approach has been to prioritize exposures—identifying and addressing the most critical vulnerabilities first. However, this method, while logical on the ...

Malware peddlers experimenting with BPL sideloading and masking malicious payloads as PGP keys

A newly spotted campaign is leveraging BPL sideloading and other uncommon tricks to deliver the IDAT Loader (aka HijackLoader) malware and prevent its detection. The campaign Spotted by Kroll’s incident responders and analyzed by the ...

Developer errors lead to long-term exposure of sensitive data in Git repos

Credentials, API tokens, and passkeys – collectively referred to as secrets – from organizations around the globe were exposed for years, according to Aqua Security’s latest research. By scanning the most popular 100 organizations on ...

6 Tips for Preventing DDoS Attacks Using Rate Limits

Rate limiting is a well-known technique for limiting network traffic to web servers, APIs, or other online services. It is also one of the methods available to you for blocking DDoS attackers from flooding your system with requests and exhausting ...

Maven Central and the tragedy of the commons

The tragedy of the commons is a concept in economics and ecology that describes a situation where individuals, acting in their own self-interest, collectively deplete a shared resource. In simpler terms, it's the idea that when a resource is ...

Kivu Consulting introduces CyberCertainty Managed XDR

Kivu Consulting has launched CyberCertainty Managed Extended Detection and Response (XDR), the next generation of its managed security service. “The combination of Kivu’s threat expertise along with innovative, leading technology ...

Critical ADOdb Vulnerabilities Fixed in Ubuntu

Multiple vulnerabilities have been addressed in ADOdb, a PHP database abstraction layer library. These vulnerabilities could cause severe security issues, such as SQL injection attacks, cross-site scripting (XSS) attacks, and authentication ...

Compromised plugins found on WordPress.org

An unknown threat actor has compromised five (and possibly more) WordPress plugins and injected them with code that creates a new admin account, effectively allowing them complete control over WordPress installations / websites. “In ...

Grammarly delivers enhanced security and control features for safer AI use

Grammarly announced an extensive set of new security, deployment, and control features to meet soaring enterprise demand for comprehensive, secure AI communication assistance. Grammarly already serves leading enterprises like Salesforce, ...

Navigating Security Challenges in Containerized Applications

Containerized applications offer several advantages over traditional deployment methods, making them a powerful tool for modern application development and deployment. Understanding the security complexities of containers and implementing ...

FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

McLean, United States of America, 26th June 2024, CyberNewsWire The post FireTail Unveils Free Access for All to Cutting-Edge API Security Platform appeared first on Security Boulevard.

Operation Celestial Force: Pakistani Long-running Malware

Recent reports state that cybersecurity experts have uncovered a long-standing malware initiative known as Operation Celestial Force, linked to threat actors associated with Pakistan. This electron-based malware loader campaign, dating back to at ...

Stepping Into the Attacker’s Shoes: The Strategic Power of Red Teaming (Insights from the Field)

Red Teaming security assessments aim to demonstrate to clients how attackers in the real world might link together various exploits and attack methods to reach their objectives. The post Stepping Into the Attacker’s Shoes: The Strategic ...

EU Opens the App Store Gates: A Call to Arms for MDM Implementation

By introducing a mobile device management (MDM) platform into the existing infrastructure, administrators gain the ability to restrict sideloading on managed devices. The post EU Opens the App Store Gates: A Call to Arms for MDM Implementation ...

Cybersecurity jobs available right now: June 26, 2024

CISO Influx | Indonesia | Remote – View job details As a CISO, you will be responsible for protecting Influx from information security risks through the development, implementation, and maintenance of our security program ...

Future trends in cyber warfare: Predictions for AI integration and space-based operations

In this Help Net Security interview, Morgan Wright, Chief Security Advisor at SentinelOne, discusses how AI is utilized in modern cyber warfare by state and non-state actors. AI enhances decision-making speed and precision for state actors, ...