Application Security News and Articles


Enhancing security through proactive patch management

Despite its importance, patching can be challenging for organizations due to factors such as the sheer volume of patches released by software vendors, compatibility issues with existing systems, and the need to balance security with operational ...

Photos: BSidesZagreb 2024

BSidesZagreb is a complimentary, non-profit conference driven by community participation, designed for information security professionals and enthusiasts to gather, exchange ideas, and collaborate. Help Net Security sponsored the 2024 edition ...

USENIX Security ’23 – Liang Niu, Shujaat Mirza, Zayd Maradni, Christina Pöpper – CodexLeaks: Privacy Leaks from Code Generation Language Models in GitHub Copilot

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

Human Brain Chip Implants: Helpful? Safe? Ethical?

Major developments regarding implanting chips in human brains have been announced in 2024. Will this procedure become widespread? Are precautions — or even regulations — needed? The post Human Brain Chip Implants: Helpful? Safe? Ethical? ...

Week in review: LockBit leak site is back online, NIST updates its Cybersecurity Framework

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Overcoming the pressures of cybersecurity startup leadership In this Help Net Security interview, Kunal Agarwal, CEO at Dope Security, offers a ...

USENIX Security ’23 – Log: It’s Big, It’s Heavy, It’s Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem

Authors/Presenters: Allan Lyons, Julien Gamba, Austin Shawaga, Joel Reardon, Juan Tapiador, Serge Egelman, Narseo Vallina-Rodriguez Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the ...

Open Redirect Vulnerabilities: Understanding and mitigations in JavaScript

An Open Redirect Vulnerability occurs when a web application accepts a user-controlled input that directs the user to a different URL.Continue reading on Medium »

Deepfactor 3.5 Includes Enhanced Vulnerability Prioritization with EPSS Support and Reachability Analysis for Golang

... Read more » The post Deepfactor 3.5 Includes Enhanced Vulnerability Prioritization with EPSS Support and Reachability Analysis for Golang appeared first on Deepfactor. The post Deepfactor 3.5 Includes Enhanced Vulnerability Prioritization ...

A Deep Dive into the 2024 Prudential and LoanDepot Breaches

The post A Deep Dive into the 2024 Prudential and LoanDepot Breaches appeared first on Votiro. The post A Deep Dive into the 2024 Prudential and LoanDepot Breaches appeared first on Security Boulevard.

SafeBreach Coverage for AA24-060A (Phobos Ransomware) and AA24-060B (Ivanti Connect Secure)

CISA issued two separate advisories related to malicious behavior exhibited by threat actors. AA24-060A pertains to Phobos Ransomware and AA24-060B pertains to exploitation of vulnerabilities in Ivanti Connect Secure and Policy Secure ...

Response to CISA Advisory (AA24-060A): #StopRansomware: Phobos Ransomware

AttackIQ has released a new assessment template in response to the recently published CISA Advisory (AA24-060A) which disseminates known Tactics, Techniques, and Procedures (TTPs) and Indicators of Compromise (IOCs) associated with the Phobos ...

USENIX Security ’23 – Vivek Nair, Dawn Song – Multi-Factor Key Derivation Function (MFKDF) for Fast, Flexible, Secure, & Practical Key Management

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

What Does The Mother of All Breaches (MOAB) Mean for Organizations?

What does the colossal data leak, the Mother of All Breaches (MOAB), mean for businesses around the globe? Recently, we witnessed a seismic event with the emergence of the Mother of All Breaches (MOAB). This massive data leak amalgamates records ...

CISA, Mandiant Warn of a Worsening Situation for Ivanti Users

The federal government and cybersecurity teams are warning organizations that threat groups are exploiting multiple flaws in Ivanti’s VPN appliances despite the vendor’s Integrity Checking Tool (ICT) and even after factory resets. An advisory ...

Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #280 – The Tech Stack and the Architect

via the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink The post Comic Agilé – Mikkel Noe-Nygaard, ...

Panda is Not Cute Anymore

SecureIQLab’s threat intel and research team recently discovered a data dump purporting to belong to a Chinese company. The company in question was breached by an unknown entity that may have a grudge against the Chinese government. Upon closer ...

How to secure your API secret keys from being exposed?

Learn about the dangers of API secret key exposure and discover our selection of prevention strategies. The post How to secure your API secret keys from being exposed? appeared first on Security Boulevard.

Cheap Video Doorbell Cams: Tools of Stalkers and Thieves

EKEN IoT FAIL: Amazon, Sears and Shein still sell security swerving stuff. The post Cheap Video Doorbell Cams: Tools of Stalkers and Thieves appeared first on Security Boulevard.

What is a Shadow API? Understanding the risks and strategies to prevent their sprawl

Understand main Shadow API risks, and discover powerful strategies to curb Shadow API sprawl effectively. The post What is a Shadow API? Understanding the risks and strategies to prevent their sprawl appeared first on Security Boulevard.

USENIX Security ’23 – Conor Gilsenan, Fuzail Shakir, Noura Alomar, Serge Egelman – Security and Privacy Failures in Popular 2FA Apps

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...