Application Security News and Articles


Billions: The New Significance of Billion-Dollar Scale in Cybersecurity

Billion-dollar scale is the new normal for late-stage companies in cybersecurity. The post Billions: The New Significance of Billion-Dollar Scale in Cybersecurity appeared first on Security Boulevard.

Understanding Audit Readiness Assessments: Their Importance and Whether You Need Them

As a compliance management software company, we at Hyperproof believe it’s important to hold ourselves to the highest standards in all that we do. Even before we’ve made our product publicly available, we’re already making a significant ...

USENIX Security ’23 – CSHER: A System For Compact Storage With HE-Retrieval

Authors/Presenters:Adi Akavia, Neta Oren, Boaz Sapir, Margarita Vald Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from ...

Detecting Attacks Against Kerberos with Network Metadata

Netography recently released a new collection of capabilities for detecting attacks on the Kerberos protocol that are often launched against Windows domains during network intrusions. Some of these attacks are difficult to detect with log ...

The Ultimate Guide to Compliance Management System

The post The Ultimate Guide to Compliance Management System appeared first on Sovy. The post The Ultimate Guide to Compliance Management System appeared first on Security Boulevard.

Snowflake and the Continuing Identity Threat Detection Gap Across SaaS and Cloud

By Adam Koblentz In recent weeks, a new wide-scale identity security incident has been unfolding that is refocusing the spotlight on important questions such as: Why are account takeover, credential misuse, and other identity-focused incidents ...

CVE-2024-29824 Deep Dive: Ivanti EPM SQL Injection Remote Code Execution Vulnerability

Introduction Ivanti Endpoint Manager (EPM) is an enterprise endpoint management solution that allows for centralized management of devices within an organization. On May 24, 2024, ZDI and Ivanti released an advisory describing a SQL injection ...

Splunk’s security innovations boost threat detection and response

Splunk announced new security innovations aimed at bolstering threat detection and security operations across multiple data sources. These advancements include Splunk Enterprise 8.0, which empowers security teams to proactively manage and ...

Prevalent adds AI-powered enhancements to reduce risk assessment time

Prevalent announced that it added several AI-powered timesaving and threat-sensing enhancements to the Prevalent Third-Party Risk Management Platform, its SaaS solution used by hundreds of organizations around the world to manage, monitor and ...

Qmulos Recognized in 2024 Splunk Regional Partner Awards

Qmulos Named 2024 Regional Partner of the Year Winner for Outstanding Public Sector Partnership - Qmulos, a next-generation compliance, security and risk management automation provider, announced today it has received the 2024 Regional Partner of ...

“Mission Possible”: How DTEX is Supporting National Security from the Inside Out

When considering the most significant cyber threats to the public sector, many immediately think of foreign adversaries breaching federal agencies. This perception is understandable, as nation-state cyber attacks often dominate headlines. ...

Acronis XDR enhances EDR with comprehensive cybersecurity for MSPs

Acronis has introduced Acronis Advanced Security + XDR the newest addition to the company’s security solution portfolio. Easy to deploy, manage, and maintain, Acronis XDR expands on the current endpoint detection and response (EDR) offering and ...

CORL Companion automates the security assessment response for healthcare vendors

CORL released CORL Companion, an AI-powered assistant for healthcare vendors to automate and enhance security assessment response. The release reflects CORL’s continued attention on the healthcare vendor as a primary stakeholder in the ...

Why malware matters most: 6 ways to foil software threats faster

Security teams spend a lot of time chasing software vulnerabilities. The fact is, however, that their time would be better spent combating malware because the payoff is better: faster detection, response, and resolution of threats. The post Why ...

20,000 FortiGate appliances compromised by Chinese hackers

Coathanger – a piece of malware specifically built to persist on Fortinet’s FortiGate appliances – may still be lurking on too many devices deployed worldwide. How Coathanger persists on FortiGate devices In February 2024, the Dutch ...

Using AI for Political Polling

Public polling is a critical function of modern political campaigns and movements, but it isn’t what it once was. Recent US election cycles have produced copious postmortems explaining both the successes and the flaws of public polling. There ...

Stronger Private Key Protection For Code Signing: Are You Compliant With The Latest CA/B Forum Requirements?

Last year, on June 1, 2023, the CA/Browser (CA/B) Forum’s updated Code Signing Baseline Requirements went into effect, aiming to enforce stronger private key protection for code signing certificates. The updated mandate now requires both ...

Major cybersecurity upgrades announced to safeguard American healthcare

Recent cyberattacks targeting the nation’s healthcare system have demonstrated the vulnerability of hospitals and payment systems. Providers across the health system had to scramble for funding after one attack on a key payment system. And some ...

Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals

Microsoft has unveiled a new cybersecurity program to support hospitals serving more than 60 million people living in rural America. In 2023, the healthcare sector reported more ransomware attacks than any other critical infrastructure sector and ...

The Future of Security Compliance: How Emerging Technologies are Setting New Rules

This blog takes a look at the role, benefits, and considerations of technological innovations in security compliance. The post The Future of Security Compliance: How Emerging Technologies are Setting New Rules appeared first on Scytale. The post ...