Application Security News and Articles


USENIX Security ’23 – Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations

Distinguished Paper Award Winner Authors/Presenters:Tadayoshi Kohno, Yasemin Acar, Wulf Loh Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

Our CTO joins AMTSO Board

Stefan Dumitrascu Brings Expertise to AMTSO Board We are delighted to announce that our Chief Technology Officer, Stefan Dumitrascu, has been elected as a Board Member of the Anti-Malware Testing Standards Organisation (AMTSO). What is AMTSO? ...

How platform engineering helps you get a good start on Secure by Design

Designing software from the ground up to be secure, as recommended by the Secure by Design initiative from the Cybersecurity and Infrastructure Security Agency (CISA), has its challenges, especially if it's done at scale. . The post How platform ...

eSentire introduces MDR for GenAI Visibility

Leveraging security telemetry across an organization’s log and network data sources, eSentire’s MDR for GenAI Visibility solution provides daily insights into an organization’s use of GenAI technology, including the most frequently used AI ...

Threat-Informed Defense and Breach and Attack Simulation: Why You Need Both

With so many different market segments in the security industry, it’s inevitable to run into some overlap and confusion, particularly with newer segments like Breach and Attack Simulation (BAS) and Threat-Informed Defense, a subset of ...

The Shift to Alternative Social Media: What It Means for Security Teams Responsible for Threat Intelligence Gathering

Why the rise in alternative social media platforms with less moderation and greater anonymity calls for a more proactive approach to threat monitoring. Early versions of social media platforms began emerging in the late 90s and early 2000s with ...

How AttackIQ Can Bolster CORA Compliance in the Federal Government

Federal agencies need strong security controls and continuous compliance. The Cyber Operational Readiness Assessment (CORA) by the DHS and industry partners enhances critical infrastructure resilience against cyber threats. The post How AttackIQ ...

Ransomware disrupts Indonesia’s national data centre, LockBit gang claims US Federal Reserve breach

Ransomware attackers wielding a LockBit variant dubbed Brain Cipher have disrupted a temporary national data center facility which supports the operations of 200+ Indonesian government agencies and public services. The attackers are asking for a ...

Top 6 Compliance Reporting Tools in 2024

What is a Compliance Report? A compliance report describes how successfully or poorly a company complies with security and business-related regulations. It is distributed to various audiences, including the board, senior executives, regulators, ...

New security loophole allows spying on internet users’ online activity

Researchers at Graz University of Technology were able to spy on users’ online activities simply by monitoring fluctuations in the speed of their internet connection. This vulnerability, known as SnailLoad, does not require malicious code ...

Reverse engineering eBPF programs

eBPF is one of the most widely used technologies in today’s computing ecosystem, starting from the cloud sector The post Reverse engineering eBPF programs appeared first on ARMO. The post Reverse engineering eBPF programs appeared first on ...

Addressing Node.js Vulnerabilities in Ubuntu

Node.js is an open-source, cross-platform JavaScript runtime environment built on the powerful V8 engine from Chrome. It allows you to run JavaScript code outside a web browser, making it popular for building real-time applications and data ...

What is Cyberbullying: Parents Guide

Our guide provides essential insights on cyberbullying, helping parents recognize signs and take steps to protect their children's online. The post What is Cyberbullying: Parents Guide appeared first on SternX Technology. The post What is ...

TuxCare Extended Lifecycle Support Services Now Offered through Virtuozzo

PALO ALTO, Calif. – June 25, 2024 – TuxCare, the enterprise solutions division of CloudLinux and a global innovator in cybersecurity for Linux, today announced that Virtuozzo, the alternative cloud platform leader, now offers TuxCare’s ...

Alert: Australian Non-Profit Accuses Google Privacy Sandbox

Google’s initiative to phase out third-party tracking cookies through its Google Privacy Sandbox has encountered criticism from Austrian privacy advocacy group noyb (none of your business). The non-profit alleges that Google’s proposed ...

Intermediate vs Root Certificates

PKI ensures secure digital communication by verifying online entities. Root and intermediate certificates create a trust chain, ensuring information integrity. The post Intermediate vs Root Certificates appeared first on Security Boulevard.

What’s New in PCI DSS Version 4.1?

In today’s business landscape, adhering to the Payment Card Industry Data Security Standard (PCI DSS) is essential. As a business owner, have you ever considered how secure your client’s credit card information is? In the modern digital age, ...

Zeek: Open-source network traffic analysis, security monitoring

Zeek is an open-source network analysis framework. Unlike an active security device such as a firewall, Zeek operates on a versatile ‘sensor’ that can be a hardware, software, virtual, or cloud platform. This flexibility allows Zeek ...

CISOs’ new ally: Qualys CyberSecurity Asset Management 3.0

In this Help Net Security interview, Kunal Modasiya, VP of Product Management and Growth at Qualys, explores the key features, significant advantages, and innovative technologies behind Qualys CyberSecurity Asset Management 3.0. Can you explain ...

Breaking down the numbers: Q2 2024 cybersecurity funding activity recap

We present a list of selected cybersecurity companies that received funding during the second quarter of 2024 (Q2 2024). Alethea April | $20 million Alethea closed a $20 million Series B funding round led by GV, with participation from ...