Application Security News and Articles


Empowering Teams with Efficient Secrets Rotation

How Can Efficient Secrets Rotation Empower Your Cybersecurity Team? How can organizations ensure the security of machine identities and secrets while maintaining team efficiency? The management of Non-Human Identities (NHIs), an often ...

How Reassured Are You by Your Cloud Compliance?

The Vital Role of Non-Human Identities in Cloud Compliance What makes cloud compliance an intricate challenge for modern enterprises? With digital transformation accelerates, businesses across various sectors face the critical task of ensuring ...

Driving Innovation with Secure NHIs

How Are Non-Human Identities Shaping the Future of Cybersecurity? What happens when machines need their own form of identification? This question is increasingly relevant as we dive deeper of Non-Human Identities (NHIs), which are revolutionizing ...

NDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile World

Author, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA) Our thanks to the Network and Distributed System Security (NDSS) Symposium for ...

Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884)

Oracle has revealed the existence of yet another remotely exploitable Oracle E-Business Suite vulnerability (CVE-2025-61884). About CVE-2025-61884 CVE-2025-61884 is a vulnerability in the Runtime user interface in the Oracle Configurator product ...

Revisiting CISA Priorities for FY2026 and Beyond

The Cybersecurity and Infrastructure Security Agency is under new leadership and focus as we enter FY2026. So what are the priorities for the coming year? The post Revisiting CISA Priorities for FY2026 and Beyond appeared first on Security Boulevard.

Week in review: Hackers extorting Salesforce, CentreStack 0-day exploited

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: How to get better results from bug bounty programs without wasting money The wrong bug bounty strategy can flood your team with low-value ...

Building an Effective DDoS Mitigation Strategy That Works

Every organization’s DDoS mitigation strategy should reflect its unique architecture, defense technologies, and business priorities. Yet, after conducting more than 1,500 DDoS attack simulations and consulting engagements with companies of all ...

Is Your Spend on Cloud Security Justified?

How Secure Are Your Non-Human Identities? Have you ever considered how secure your non-human identities are? Safeguarding Non-Human Identities (NHI) is paramount, particularly where organizations increasingly shift operations to the cloud. ...

NDSS 2025 – Keynote 1: Quantum Security Unleashed: A New Era for Secure Communications and Systems

Author, Creator & Presenter: Dr. Johanna Sepúlveda PhD, Senior Expert and Technical Domain Manager for Quantum and Quantum-Secure Technologies, Airbus Defence and Space Our thanks to the Network and Distributed System Security (NDSS) ...

Best Cybersecurity Company in Ahmedabad

Amid the vibrant energy of Manek Chowk and the city’s growing tech landscape, Ahmedabad represents the perfect harmony of tradition and innovation. As the best cybersecurity company in Ahmedabad, Kratikal is proud to enhance the city’s ...

Exploring the Concept of Enterprise Security Management

Understand Enterprise Security Management (ESM) and its importance in safeguarding organizations. Explore key components, integration with SSO, and best practices for robust security. The post Exploring the Concept of Enterprise Security ...

Is a CIAM Certification Beneficial?

Explore the pros & cons of CIAM certification for authentication & software development. Learn about career benefits, core skills validated, and how it compares to other certifications. The post Is a CIAM Certification Beneficial? ...

Oracle E-Business Suite Remote Code Execution Vulnerability (CVE-2025-61882) Notice

Overview Recently, NSFOCUS CERT detected that Oracle issued a security bulletin to fix the remote code execution vulnerability (CVE-2025-61882) in Oracle E-Business Suite; Because Oracle Concurrent Processing (BI Publisher Integration) of Oracle ...

Ultimate Guide to ISO 27001’s Cryptographic Controls

Ask anyone on the outside of information security what the most important part of the industry is, and you’ll get a lot of different answers, but among them will be cryptography. Using strong encryption to hide information where it can’t be ...

News alert: SquareX exposes how AI browsers fall prey to OAuth hijacks and malware traps

PALO ALTO, Calif., Oct. 9, 2025, CyberNewswire — As AI Browsers rapidly gain adoption across enterprises, SquareX has released critical security research exposing major vulnerabilities that could allow attackers to exploit AI Browsers to ...

Independent Verification of NHI Security: Necessary?

Why Is Independent Verification of Non-Human Identities Crucial for Cybersecurity? When it comes to cybersecurity, how often do organizations think about their machine identities, often overlooked yet vital for robust security protocols? The ...

How Safe Are Your Non-Human Identities Really?

Are You Harnessing the Full Potential of Non-Human Identities in Your Cloud Security Strategy? Non-human identities (NHIs) are revolutionizing the approach to cybersecurity strategy, particularly for organizations navigating the complexities of ...

News alert: Lightship, OpenSSL submit OpenSSL 3.5.4 — with post-quantum crypto on board

NEWARK, N.J., October 9, 2025, CyberNewswire — Lightship Security, an Applus+ Laboratories company and accredited cryptographic security test laboratory, and the OpenSSL Corporation, the co-maintainer of the OpenSSL Library, announce the ...

Secrets Sprawl is Killing DevOps Speed – Here’s How to Fix It

5 min readHard-coded secrets and credential sprawl slow DevOps teams by hours daily. Learn how identity-based access management eliminates secrets and boosts speed. The post Secrets Sprawl is Killing DevOps Speed – Here’s How to Fix It ...