Application Security News and Articles


AI’s impact on data privacy remains unclear

In this Help Net Security round-up, experts discuss the importance of embracing AI while implementing protective measures against threats, global AI adoption, consumer perceptions, and behaviors regarding data privacy. Complete videos Tracy ...

USENIX Security ’23 – We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets

Authors/Presenters:Sven Hebrok, Simon Nachtigall, Marcel Maehren, Nurullah Erinola, Robert Merget, Juraj Somorovsky, Jörg Schwenk Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the ...

How we differentiate ARMO Platform from Open Source Kubescape

In this blog post we will be discussing how we differentiate ARMO Platform from Open Source Kubescape. The post How we differentiate ARMO Platform from Open Source Kubescape appeared first on ARMO. The post How we differentiate ARMO Platform ...

What is Identity Threat Detection And Response (ITDR)

Identity Threat Detection and Response (ITDR) is a framework that focuses on protecting your organization from being compromised by threat actors exploiting your organization’s identities. Practically, ITDR solutions include system policies, ...

Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromised

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) JetBrains has fixed a critical vulnerability (CVE-2024-37051) ...

Microsoft Accepts Responsibility for U.S. Government Security Breaches

Microsoft president says the company accepts full responsibility for every cybersecurity issue raised in a recent Cyber Safety Review Board report created by multiple officials from several U.S. government agencies The post Microsoft Accepts ...

USENIX Security ’23 – Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet

Authors/Presenters:Nurullah Erinola, Marcel Maehren, Robert Merget, Juraj Somorovsky, Jörg Schwenk Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to ...

FedRAMP vs. ISO 27001: How They Compare and Which Do You Need?

In the world of security, there are many different frameworks that may be relevant or important to your plans. We’ve talked a lot about FedRAMP, the federal government’s security framework, but it’s only one of many options. Others, from ...

Contrast Security | PwC Luxembourg Award | Runtime Security

Contrast Security just won the highly competitive 2024 PwC Luxembourg Award for Cybersecurity & Privacy Solution of the Year with a simple premise:  The post Contrast Security | PwC Luxembourg Award | Runtime Security appeared first on ...

Liquidmatrix Security Digest Podcast – Episode 79

Episode 0x79 We have no idea what’s going on either… But we’re going to keep doing this as long as we can manage to schedule the appointment in our calendars and also show up… Upcoming this week… Lots of News Breaches SCADA / Cyber, ...

Understanding Apple’s On-Device and Server Foundation Models release

By Artem Dinaburg Earlier this week, at Apple’s WWDC, we finally witnessed Apple’s AI strategy. The videos and live demos were accompanied by two long-form releases: Apple’s Private Cloud Compute and Apple’s On-Device and Server ...

PCC: Bold step forward, not without flaws

By Adelin Travers Earlier this week, Apple announced Private Cloud Compute (or PCC for short). Without deep context on the state of the art of Artificial Intelligence (AI) and Machine Learning (ML) security, some sensible design choices may seem ...

USENIX Security ’23 – Keep Your Friends Close, but Your Routeservers Closer: Insights into RPKI Validation in the Internet

Authors/Presenters:Tomas Hlavacek, Haya Shulman, Niklas Vogel, Michael Waidner Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating ...

CVE of the month, CheckPoint Security Gateway exploit CVE-2024-24919

This month we dive into CheckPoints CVE-2024-24919 to explain what this vulnerability does and why we have seen it being used in the wild already! The post CVE of the month, CheckPoint Security Gateway exploit CVE-2024-24919 appeared first on ...

A New Tactic in the Rapid Evolution of QR Code Scams

QR codes have been around for three decades, but it wasn’t until the COVID-19 pandemic hit in 2020 that they got wide use, with restaurants, health care facilities, and other businesses turning to them to customers contactless ways to read ...

Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #293 – Holacracy

via the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink The post Comic Agilé – Mikkel Noe-Nygaard, ...

Better SaaS Security with AppOmni and Okta Identity Engine

Discover how AppOmni enhances the Okta Identity Engine (OIE) to provide your organization with robust SaaS security, featuring dynamic authorization and precise access control. The post Better SaaS Security with AppOmni and Okta Identity Engine ...

From Check-In to Check-Out: Calculating the Cost of Online Threats for the Travel Industry

91% of travel and hospitality websites are not protected against even the most simple bot attacks. Learn about online threats to the travel industry & how to mitigate them. The post From Check-In to Check-Out: Calculating the Cost of Online ...

We Love What’s Broken … Yes, This Of Course Means SIEM!

We Love What’s Broken … Yes, This Of Course Means SIEM! SIEM challenges never stopped me from loving this technology, but I am very cognizant of YMMV. Anyhow, CardinalOps released their annual “state of SIEM” report, and here are some ...

Protect, Detect, and Respond Using a Risk-Based Approach

The National Institute of Standards and Technology (NIST) Cybersecurity Framework provides guidelines for organizations to use in their cybersecurity efforts. The NIST categories include identify, protect, detect, respond, and recover. ...