Application Security News and Articles


Say Hello to Scytale’s Newest Integrations, Enabling Deeper Compliance Automation

Take a look at Scytale's newest integrations added in 2024 including Deel, Hubspot, Asana, Cloudfare, and more. The post Say Hello to Scytale’s Newest Integrations, Enabling Deeper Compliance Automation appeared first on Scytale. The post Say ...

RSAC 2024: The many flavors of ‘SASE’ now includes Aryaka’s ‘Unified SASE as a Service.”

Secure Access Service Edge (SASE) has come a long way since Gartner christened this cloud-centric cybersecurity framework in 2019. Related: Can SASE stop tech sprawl? SASE blends networking architecture, namely SD-WAN, with cloud-delivered ...

On-Demand Materiality Analysis Guides Determination | Kovrr

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post On-Demand Materiality Analysis Guides Determination | Kovrr appeared first on Security Boulevard.

Google Pixel Firmware Zero-Day Flaw Exploited And Patched

Google has recently issued a warning regarding a critical security flaw affecting Google Pixel Firmware, which has been actively exploited as a zero-day vulnerability. Identified as CVE-2024-32896, this high-severity issue involves an elevation ...

Why are threat actors faking data breaches?

Earlier this year Europcar discovered a hacker selling info on its 50 million customers on the dark web. The European car rental company immediately launched an investigation, only to discover that the data being sold was completely doctored, ...

Securing the video market: From identification to disruption

Video piracy, a pressing issue often unnoticed in security discussions, is rising and demands immediate attention. In this Help Net Security video, Chris White, Chief Architect at Friend MTS, discusses monitoring, identifying, and disrupting ...

Social Media Warning Labels, Should You Store Passwords in Your Web Browser?

In this episode of the Shared Security Podcast, the team debates the Surgeon General’s recent call for social media warning labels and explores the pros and cons. Scott discusses whether passwords should be stored in web browsers, potentially ...

1 out of 3 breaches go undetected

Organizations continue to struggle in detecting breaches as they become more targeted and sophisticated, with more than 1 out of 3 organizations citing their existing security tools were unable to detect breaches when they occur, according to ...

Cracking down on cybercrime: Who you gonna call?

As cybercrime continues to grow, law enforcement agencies worldwide face increased challenges in safeguarding organizations and individuals. In this article, we highlight law enforcement agencies that have scored notable successes against ...

The End of Our Dog Era

 "That's the end of our Joplin era," my wife said to my oldest daughter. We were still crying and wiping our tears. I didn't say it out loud, but I thought "That was the end of our dog era," We'd just returned to the car from the vet's office ...

Decoding the Rise of Zero-Trust Adoption in Government Sector

As cyber threats become increasingly sophisticated, government sectors turn to Zero-Trust architecture to revolutionize their cybersecurity measures. This strategy is crucial for safeguarding sensitive information and maintaining national ...

USENIX Security ’23 – Educators’ Perspectives of Using (or Not Using) Online Exam Proctoring

Authors/Presenters: David G. Balash, Elena Korkes, Miles Grant, Adam J. Aviv, Rahel A. Fainchtein, Micah Sherr Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong ...

Navigating the CISO Role: Common Pitfalls for New Leaders

What are the top mistakes that I see new security leaders continue to make in 2024 as they start their CISO careers or take on new roles? How can these challenges be addressed? The post Navigating the CISO Role: Common Pitfalls for New Leaders ...

Week in review: CDK Global cyberattack, critical vCenter Server RCE fixed

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The rise of SaaS security teams In this Help Net Security interview, Hillary Baron, Senior Technical Director for Research at CSA, highlights ...

USENIX Security ’23 – “I’m Going To Trust This Until It Burns Me” Parents’ Privacy Concerns and Delegation of Trust in K-8 Educational Technology

Authors/Presenters: Victoria Zhong, Susan McGregor, Rachel Greenstadt Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from ...

What Are the Benefits of FedRAMP Certification in 2024?

FedRAMP, the federal risk and authorization management program, is a comprehensive and structured way to develop a security – mostly cybersecurity – position when working with the federal government. It’s a framework meant for contractors ...

Learn about ISO 27001 Penetration Testing and its requirements

ISO 27001, the internationally recognised standard for information security management systems (ISMS), provides a framework for organisations to protect their valuable information assets. Penetration testing is crucial in preventing data breaches ...

PCI DSS Penetration Testing Guide

The Payment Card Industry Data Security Standard (PCI DSS) is a global cornerstone for safeguarding cardholder data. PCI DSS version 4.0, the most recent iteration, emphasises a dynamic, risk-based approach to security, compelling organisations ...

AI Everywhere: Key Takeaways from the Gartner Security & Risk Management Summit 2024

The Gartner Security & Risk Management Summit 2024 showcased the transformative power of artificial intelligence (AI) across various industries, with a particular focus on the cybersecurity landscape. As organizations increasingly adopt AI ...

U.S. Bans Sale of Kaspersky Cybersecurity Software

Long simmering suspicions about the loyalty of Kaspersky Software, a cybersecurity firm headquartered in Russia, came to a head this week after the U.S. government banned the sale of the company’s software, effective July 20th, to both ...