Application Security News and Articles


USENIX Security ’23 – Hui Peng, Zhihao Yao, Ardalan Amiri Sani, Dave (Jing) Tian, Mathias Payer – GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

HP’s Threat Report – New Threats, Bigger Problems

HP issues a threat report quarterly (this month’s came with a video), and this quarter’s report suggests that things are getting worse with regard to attacks and related monetary damage. While this report mostly focuses on attacks on PCs and ...

What the Upcoming DORA Regulation Means for Your Business

The EU’s Digital Operational Resilience Act (DORA) is just a year away. It impacts any financial services firm serving customers in the region, even if they are based outside it. And, crucially, it also covers IT suppliers to these ...

Hackers Exploit ConnectWise Bugs to Deploy LockBit Ransomware

Cyberattacks exploiting critical vulnerabilities in ConnectWise’s remote monitoring and management (RMM) tool revealed this week have snowballed and some bad actors are using it to deploy LockBit ransomware, which was the target of a recent ...

Continuously fuzzing Python C extensions

By Matt Schwager Deserializing, decoding, and processing untrusted input are telltale signs that your project would benefit from fuzzing. Yes, even Python projects. Fuzzing helps reduce bugs in high-assurance software developed in all programming ...

Securing Sensitive Information in Cloud Repositories

With the accelerating transition to cloud environments, securing sensitive information has emerged as a paramount concern. The post Securing Sensitive Information in Cloud Repositories appeared first on Security Boulevard.

Cybersecurity Insights with Contrast CISO David Lindner | 2/23/24

Insight #1 The post quantum encryption era is upon us, and Apple is leading the charge to protect against future quantum computing attacks by boosting security on its iMessage platform, adding a new form of message encryption on top of its ...

Organizations Unprepared to Face Cloud Security Threats

The Cloud Security Alliance (CSA) State of Security Remediation report underscored the difficult balancing act cloud security experts face. The post Organizations Unprepared to Face Cloud Security Threats appeared first on Security Boulevard.

Avast ordered to pay $16.5 million for misuse of user data

The Federal Trade Commission will require software provider Avast to pay $16.5 million and prohibit the company from selling or licensing any web browsing data for advertising purposes to settle charges that the company and its subsidiaries sold ...

Mitigating Employee Sabotage: Proactive Strategies for Businesses

This Article Mitigating Employee Sabotage: Proactive Strategies for Businesses was first published on Signpost Six. | https://www.signpostsix.com/ What is Employee Sabotage? In the intricate web of modern business operations, the threat of ...

Why is Cybersecurity Important for Driverless Vehicles?

Driverless vehicles represent a groundbreaking technological advancement in transportation, promising safer roads, efficient mobility, and reduced environmental impact. However, the realisation of this future hinges on technological innovation ...

Adversarial machine learning: what is it and are we ready? ⎜Anmol Agarwal

Today, we're joined by Anmol Agarwal, a security researcher at Nokia. Tune in as we challenge her insights on adversarial machine learning. The post Adversarial machine learning: what is it and are we ready? ⎜Anmol Agarwal appeared first on ...

What is Advanced Threat Protection and How to Use It in Your Business

As businesses accelerate their digital initiatives, the shadow of cybersecurity threats grows. Every advancement brings new challenges—is your Google account hacked? Are covert malware campaigns targeting your infrastructure? Amidst extensive ...

Alert: Coyote Trojan Strike Compromises 61 Brazilian Banks

Financial cyberattacks pose a significant threat to the stability of global economies and the security of financial institutions. In a recent cybersecurity development, a staggering 61 banks in Brazil have fallen victim to a sophisticated banking ...

A Buyer’s Guide to OT/ICS Security Solutions

The interconnectedness of these systems, once confined to physical processes, has opened a new era where digital threats can have real-world consequences. These technological bedrocks form the backbone of critical infrastructure, from power ...

The old, not the new: Basic security issues still biggest threat to enterprises

In 2023, cybercriminals saw more opportunities to “log in” versus hack into corporate networks through valid accounts – making this tactic a preferred weapon for threat actors, according to IBM’s 2024 X-Force Threat ...

New infosec products of the week: February 23, 2024

Here’s a look at the most interesting products from the past week, featuring releases from ManageEngine, Metomic, Pindrop, and Truffle Security. Pindrop Pulse offers protection against audio deepfakes Pindrop Pulse’s ability to detect ...

Secure email gateways struggle to keep pace with sophisticated phishing campaigns

In 2023, malicious email threats bypassing secure email gateways (SEGs) increased by more than 100%, according to Cofense. In just two years, Cofense identified over 1.5 million malicious emails bypassing their customers’ SEGs, signaling a 37% ...

2024 will be a volatile year for cybersecurity as ransomware groups evolve

Hackers have significantly increased demands for ransomware, rising over 20% year-over-year to $600,000, according to Arctic Wolf. Organizations are failing to patch their networks And there are worrying signs that 2024 will be especially ...

92% of companies eyeing investment in AI-powered software

In 2024, buyers are increasingly focused on cost efficiency, AI functionality, and enhanced security, according to Gartner. The report reveals that 61% of buyers are seeking upgrades for more functionality in their recently purchased software. ...