Application Security News and Articles


Cloud Threats Rise: Who’s Attacking and How They Get In

Knowing who the threat actors are, how they are getting into your cloud environment and where your vulnerabilities are is a starting point to improving cloud security. The post Cloud Threats Rise: Who’s Attacking and How They Get In ...

China-Linked ‘Redfly’ Group Targeted Power Grid

Symantec warns that the Redfly APT appears to be focusing exclusively on targeting critical national infrastructure organizations. The post China-Linked ‘Redfly’ Group Targeted Power Grid appeared first on SecurityWeek.

Entrust names Jordan Avnaim as CISO

Entrust named Jordan Avnaim as its Chief Information Security Officer (CISO). With more than 20 years of experience leading information security functions and influencing change and enterprise digital transformation, Jordan will help scale and ...

Finding Your Way in Cloud Security

The next time you see CNAPP, CASB, WAAS, CSPM or many of the other phrases, it will be helpful to take a deep breath and realize enterprise security has never been a binary one or zero. The post Finding Your Way in Cloud Security appeared first ...

Cleafy Raises €10 Million for Online Banking Fraud Prevention Platform

Real-time online banking fraud prevention firm Cleafy has raised €10 million ($10.7 million) in a funding round led by United Ventures. The post Cleafy Raises €10 Million for Online Banking Fraud Prevention Platform appeared first on ...

SAP Patch Day: September 2023

SAP Patch Day: September 2023 ltabo Tue, 09/12/2023 - 10:35 Critical Patches for SAP BusinessObjects and SAP CommonCryptoLib released Highlights of September SAP Security Notes analysis include: September Summary—Eighteen new and updated ...

Court Convicts Portuguese Hacker in Football Leaks Trial and Gives Him a 4-Year Suspended Sentence

Portuguese hacker behind “Football Leaks” convicted by a Lisbon court of nine crimes and given a suspended prison sentence of four years. The post Court Convicts Portuguese Hacker in Football Leaks Trial and Gives Him a 4-Year Suspended ...

Requests via Facebook Messenger lead to hijacked business accounts

Hijackers of Facebook business accounts are relying on fake business inquiries and threats of page/account suspension to trick targets into downloading password-stealing malware. Examples of phishing messages. (Source: Guardio Labs) The campaign ...

DFIR Company Binalyze Raises $19 Million in Series A Funding

Estonian DFIR company Binalyze has raised $19 million in a Series A funding round to grow and improve its product.  The post DFIR Company Binalyze Raises $19 Million in Series A Funding appeared first on SecurityWeek.

Chrome zero-day exploited in the wild, patch now! (CVE-2023-4863)

Google has rolled out a security update for a critical Chrome zero-day vulnerability (CVE-2023-4863) exploited in the wild. About the vulnerability (CVE-2023-4863) CVE-2023-4863 is a critical heap buffer overflow vulnerability in the component ...

What Is The Future of Digital Security 

Digital security has become one of the most crucial aspects of life in the 21st century. As more and more of our daily activities like communication, shopping, banking, entertainment, etc. move online, it is imperative that our data and devices ...

The Evolution of Certificate Management: Augmenting AD CS

Data security is paramount, and we all know the management of digital certificates plays a crucial role in ensuring secure communication and data integrity. While many organizations have been relying on Microsoft Certificate Authority (MSCA), ...

Stolen Auto Accounts: The $2 Price Tag on Your Car’s Identity

New threat intelligence uncovers nearly 15,000 automotive accounts for sale online, the likely result of a credential stuffing attack to hit top car manufacturers. The post Stolen Auto Accounts: The $2 Price Tag on Your Car’s Identity appeared ...

Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters

Google has released a Chrome 116 security update to patch CVE-2023-4863, the fourth Chrome zero-day vulnerability documented in 2023. The post Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters appeared first on SecurityWeek.

A Compilation of Conti Ransomware Gang’s Internal Leaked URLs – A Compilation

The following is a brief … A Compilation of Conti Ransomware Gang’s Internal Leaked URLs – A Compilation was first posted on September 12, 2023 at 7:59 am.©2021 "". Use of this feed is for personal non-commercial use only. If you are not ...

PCI DSS Compliance – A Milestone in SternX Technology’s Cybersecurity Success

Learn about PCI DSS compliance certification and how SternX Technology's has achieved this milestone to strengthened data security. The post PCI DSS Compliance – A Milestone in SternX Technology’s Cybersecurity Success appeared first on ...

The Top 7 Insider Threats Every Company Should Be Aware Of

This Article The Top 7 Insider Threats Every Company Should Be Aware Of was first published on Signpost Six. | https://www.signpostsix.com/ Understanding the top insider threats from within In today’s volatile and interconnected world, ...

The Voice of the Identity Practitioners is Clear: Identity Protection is Broken

As an identity security practitioner, it is not news to you that the identity attack surface is exposed. You already know that despite all your MFA and PAM efforts adversaries can still access your resources, confronting small to zero resistance. ...

17 free AWS cybersecurity courses you can take right now

Amazon Web Services (AWS) is the most extensive and widely-used cloud platform in the world, providing more than 200 services through global data centers. It serves millions of clients, ranging from startups to major corporations and government ...

Strategies for harmonizing DevSecOps and AI

The same digital automation tools that have revolutionized workflows for developers are creating an uphill battle regarding security. From data breaches and cyberattacks to compliance concerns, the stakes have never been higher for enterprises to ...