Application Security News and Articles


Veeam Data Cloud delivers data protection and recovery services on a single cloud platform

Veeam Software has unveiled the new Veeam Data Cloud, which is built on Microsoft Azure and delivers the confidence and reliability of the platform with the ease and accessibility of a cloud service. Veeam Data Cloud provides backup-as-a-service ...

ALPHV/BlackCat threatens to leak data stolen in Change Healthcare cyberattack

The ALPHV/BlackCat ransomware group has claimed responsibility for the cyberattack that targeted Optum, a subsidiary of UnitedHealth Group (UHG), causing disruption to the Change Healthcare platform and affecting pharmacy transactions across the ...

Building Your Cyber Incident Response Team

When you’re blindsided by a sudden cyber attack, it pays to have a band of heroes you can call upon to save the day. Fortunately, that’s exactly what a cyber incident response team (CIRT) is for. Think of them like the Avengers. They might ...

What CISOs Need To Know About The Lockbit Takedown

In a sweeping international operation, law enforcement agencies, spearheaded by the UK’s National Crime Agency, the U.S. Federal Bureau of Investigation, and Europol, have dealt a powerful blow to the notorious “LockBit” ransomware gang. ...

Kali Linux 2024.1 released: New tools, new look, new Kali Nethunter kernels

OffSec has released Kali Linux 2024.1, the latest version of its popular penetration testing and digital forensics platform. The new version comes with new tools, a fresh look (themes, wallpapers and icons for Kali and Kali Purple), a new image ...

Cybersecurity Risks and Vulnerabilities with Third-Party Vendors 

By Chris Clements, Vice President of Solutions Consulting Third-party vendors, contractors, and partners are often an integral part of an organization’s operations. However, they can also pose significant security risks if not properly managed, ...

Ivanti Pulse Secure Found Using End of Life CentOS 6 OS

Ivanti Pulse Secure VPN appliances have recently been a target of several sophisticated attacks, highlighting the ongoing challenges in safeguarding critical IT infrastructure like network devices. UNC5221, a nation-state group, exploited these ...

What is cyber hygiene and why businesses should know about it

Prioritize cyber hygiene for robust security. Automate practices, stay quantum-ready, and collaborate for resilience. The post What is cyber hygiene and why businesses should know about it appeared first on Security Boulevard.

Unleashing the Power of Outcome-Driven Cybersecurity: The CARE Model and Live Patching

As a CIO, security officer, or compliance officer, have you adopted the CARE model yet? In your role, you understand the importance of cybersecurity. You’ve invested in various security technologies and implemented policies and procedures to ...

AWS SNS Bulk Smishing: Protect Systems From Exploitation

In recent cybersecurity developments, a malevolent Python script named SNS Sender has surfaced as a tool for threat actors to conduct bulk smishing attacks by exploiting the Amazon Web Services (AWS) Simple Notification Service (SNS). The AWS SNS ...

BobTheSmuggler: Open-source tool for undetectable payload delivery

BobTheSmuggler is an open-source tool designed to easily compress, encrypt, and securely transport your payload. It basically enables you to hide a payload in plain sight. BobTheSmuggler is helpful in phishing campaign assessments, data ...

How better key management can close cloud security gaps troubling US government

How better key management can close cloud security gaps troubling US government madhav Thu, 02/29/2024 - 05:38 In my first blog on this topic I noted a Treasury Department report released last year listed six cloud security challenges financial ...

How organizations can navigate identity security risks in 2024

Managing IAM challenges in hybrid IT environments requires a holistic approach, integrating solutions and automating processes to ensure effective access controls and operational efficiency. In this Help Net Security interview, Deepak Taneja, CEO ...

Inside the book: Androids – The Team That Built the Android Operating System

In 2004, Android was two people who wanted to build camera software but couldn’t get investors interested. Android is a large team at Google today, delivering an OS to over 3 billion devices worldwide. In this Help Net Security video, Chet ...

Cryptojacking is no longer the sole focus of cloud attackers

As commercial adoption of cloud technologies continues, cloud-focused malware campaigns have increased in sophistication and number – a collective effort to safeguard both large and small enterprises is critical, according to Cado Security. ...

Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT

76% of enterprises lack sufficient voice and messaging fraud protection as AI-powered vishing and smishing skyrocket following the launch of ChatGPT, according to Enea. Enterprises report significant losses from mobile fraud 61% of enterprises ...

The CISO’s guide to reducing the SaaS attack surface

SaaS sprawl introduces security risks, operational headaches, and eye-popping subscription costs. Download this guide to learn how to implement a strategic approach to reducing your SaaS attack surface without slowing down the business. Inside ...

Infosec products of the month: February 2024

Here’s a look at the most interesting products from the past month, featuring releases from: Appdome, BackBox, Center for Internet Security, Cisco, CompliancePro Solutions, Cyberhaven, LOKKER, ManageEngine, Metomic, OPSWAT, Pindrop, ...

Unlocking the power of binary repositories: A DevOps team’s best friend

Why settle for a fast-food DevOps experience when binary repositories can craft a Michelin-starred development journey? The post Unlocking the power of binary repositories: A DevOps team’s best friend appeared first on Security Boulevard.

USENIX Security ’23 – Yu Chen, Yang Yu, Lidong Zhai – InfinityGauntlet: Expose Smartphone Fingerprint Authentication to Brute-force Attack

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...