Application Security News and Articles


Bitsight empowers enterprises to secure the digital supply chain

Bitsight launched a fully-integrated Third-Party Risk Management solution to help enterprise risk and security leaders protect the digital supply chain. By combining Vendor Risk Management and Continuous Monitoring into a single platform, ...

5 Trends Shaping Cybersecurity Strategy: AI Threats, SASE, ZTNA & XDR

The cybersecurity landscape is challenging, and organizations must evolve defense measures in response to escalating threats. The post 5 Trends Shaping Cybersecurity Strategy: AI Threats, SASE, ZTNA & XDR appeared first on Security Boulevard.

Digital Trust and Why Your Data Matters

Digital Trust and Why Your Data MattersTop 10 Ways You Can Promote TrustIn our digital world, where online interactions shape our lives and drive business operations, trust is the glue that holds everything together. Whether you're a consumer, a ...

Check Point introduces Quantum Force, series of AI-powered firewalls

Check Point introduces Check Point Quantum Force series: a lineup of ten firewalls designed to meet and exceed the stringent security demands of enterprise data centers, network perimeters, campuses, and businesses of all dimensions. Powered by ...

VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

VMware Enhanced Authentication Plug-in (EAP), a plugin for VMware vSphere, has two vulnerabilities (CVE-2024-22245, CVE-2024-22250) that could be exploited by attackers to mount authentication relay and session hijack attacks. The vulnerabilities ...

Hummingbird Automations improves efficiency for compliance professionals

Hummingbird launched Automations, a new product for boosting compliance productivity, reducing risk, and lowering costs. Automations provides compliance teams at financial institutions with an easy-to-use, visual automation builder, allowing them ...

CampusGuard introduces new online training courses

CampusGuard announced latest online Security Awareness and Compliance Training packages, offering expanded choices for our valued customers. The Information Security Awareness package includes access to over 20 security awareness modules, ...

Portfolio Optimization & Cyber Risk Management | Kovrr blog

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post Portfolio Optimization & Cyber Risk Management | Kovrr blog appeared first on Security Boulevard.

Multiple FreeImage Vulnerabilities Fixed in Ubuntu

Multiple vulnerabilities were discovered in FreeImage, an open-source support library for graphic image formats. These vulnerabilities, when left unaddressed, could potentially lead to denial of service attacks. On 16th January 2024, the Ubuntu ...

Alternative Operating Systems to Consider Post CentOS Stream 8 EOL

The nearing CentOS Stream 8 EOL on May 31st, 2024, left many users and organizations scrambling for alternatives Users can either migrate to alternative Linux distributions or choose Extended Lifecycle Support services because upgrading to CentOS ...

Impact of Badbox and Peachpit Malware on Android Devices

Explores the Badbox and Peachpit malware on Android devices and home networks which granted illegitimate users backdoor access. The post Impact of Badbox and Peachpit Malware on Android Devices appeared first on Security Boulevard.

Mitigating the Identity Risks of Ex-Employees’ Accounts

One of the biggest security weaknesses organizations face is their own employees. This isn’t pleasant, but it is a reality we must accept. When they make mistakes, they open the door to attackers. This is even more true when dealing with the ...

Quebec Law 25: All You Need to Know

Quebec Law 25 regulates how companies operating in Quebec manage people's data. Read here on the law's key requirements and how to comply. The post Quebec Law 25: All You Need to Know appeared first on Scytale. The post Quebec Law 25: All You ...

10 cybersecurity startups to watch in 2024

At Help Net Security, we’ve been following the cybersecurity business landscape closely for the past 25 years. Through our Industry News section, we’ve been tracking the pulse of the cybersecurity world, bringing you product news from ...

TruffleHog: Open-source solution for scanning secrets

TruffleHog is an open-source scanner that identifies and addresses exposed secrets throughout your entire technology stack. “TruffleHog was originally a research tool I independently authored in 2016. When I published it, no tools were ...

A closer look at Israeli cybersecurity funding and M&A activity in 2023

Last year was challenging for the global market, and the market downturn greatly affected even the historically resilient cybersecurity ecosystem. In this Help Net Security video, Merav Ben Avi, Content Manager at YL Ventures, talks about how the ...

The importance of a good API security strategy

In 2024, API requests accounted for 57% of dynamic internet traffic around the globe, according to the Cloudflare 2024 API Security & Management Report, confirming that APIs are a crucial component of modern software development. But with ...

Active Directory outages can cost organizations $100,000 per day

Nearly every organization has core systems services tied to Active Directory that will go down during an outage, according to Cayosoft. Consequences of system downtime for business operations The impact of just one system being down can devastate ...

Alleged Raccoon Infostealer operator extradited, verification site set up for victims

A Ukrainian national was extradited to the United States from the Netherlands after being indicted for crimes related to fraud, money laundering, and aggravated identity theft. According to court documents, Mark Sokolovsky conspired to operate ...

What is Splunk?

Unlocking the potential of data has become a mission-critical task for businesses striving to stay relevant in the age of tech. Businesses generate a truly unprecedented amount of data. Every click, log entry, move of the cursor, system alert, ...