Application Security News and Articles


What to do after the Mother of All Breaches (MOAB): Individuals, security managers, and organizations

The post What to do after the Mother of All Breaches (MOAB): Individuals, security managers, and organizations appeared first on Click Armor. The post What to do after the Mother of All Breaches (MOAB): Individuals, security managers, and ...

Decryptor for Rhysida ransomware is available!

Files encrypted by Rhysida ransomware can be successfully decrypted, due to a implementation vulnerability discovered by Korean researchers and leveraged to create a decryptor. About Rhysida Rhysida is a relatively new ransomware-as-a-service ...

Dual Ransomware Attacks: A Quicker Route to Extortion

Dual ransomware attacks are the latest trend by threat actors whereby they send a secondary strain after the initial compromise has been successful. The post Dual Ransomware Attacks: A Quicker Route to Extortion appeared first on Security Boulevard.

Why Real-Time Behavior Analytics is Critical

Real-time behavior analytics enables immediate detection and response, significantly enhancing security and reducing the window for damage The ability to not only understand but also immediately respond to threats as they occur is a principal ...

The 5 Functions of the NIST Cybersecurity Framework

The NIST Cybersecurity Framework lays out five core functions to focus your efforts: Identify, Protect, Detect, Respond, and Recover. The post The 5 Functions of the NIST Cybersecurity Framework appeared first on Scytale. The post The 5 Functions ...

Integrating cybersecurity into vehicle design and manufacturing

In this Help Net Security interview, Yaron Edan, CISO at REE Automotive, discusses the cybersecurity landscape of the automotive industry, mainly focusing on electric and connected vehicles. Edan highlights the challenges of technological ...

Hacking the flow: The consequences of compromised water systems

In this Help Net Security video, Andy Thompson, Offensive Cybersecurity Research Evangelist at CyberArk, discusses the dire consequences of hacking water systems and why their cybersecurity must be prioritized. From contaminating water supplies ...

Jason Haddix on Bug Bounties and Cybersecurity Career Growth

In episode 316, we have the pleasure to chat with Jason Haddix, a prominent influencer in the cybersecurity community. With an intriguing career path, from being a ‘computer kid’, venturing into the nascent dark web, to becoming a respected ...

Ransomware tactics evolve, become scrappier

As we enter 2024, ransomware remains the most significant cyberthreat facing businesses, according to Malwarebytes. Malwarebytes reveals that the United States accounted for almost half of all ransomware attacks in 2023. “Small and medium-sized ...

SiCat: Open-source exploit finder

SiCat is an open-source tool for exploit research designed to source and compile information about exploits from open channels and internal databases. Its primary aim is to assist in cybersecurity, enabling users to search the internet for ...

2024 cybersecurity outlook: A wave of global threats on the horizon

2024 is expected to witness a surge in cyberattacks driven by global events and the widespread accessibility of advanced technologies. In this Help Net Security round-up, we present segments from previously recorded videos where cybersecurity ...

A personal experience of CISSP boot camp

Information risk and security is an infinite field of work and study. You can spend your whole life trying to gain the width or depth of knowledge necessary to do the job competently, and every day feel you know a little less than the day ...

Should I get CISSP Certified?

The focus of CISSP is purely Information Security. Having said that, its a very big field. CISSP’s reputation as a certification is for being ‘a mile wide and an inch deep’. In fact it’s so wide that rather like the Great Wall of China, ...

Should I get CISM Certified?

The Certified Information Systems Manager (CISM) qualification is provided by ISACA, and roughly on a par with it’s CISA IT audit qualification. It is a certification for IT security managers, and like CISA tries to strike a balance between ...

USENIX Security ’23 – Pardis Emami-Naeini, Janarth Dheenadhayalan, Yuvraj Agarwal, Lorrie Faith Cranor – Are Consumers Willing to Pay for Security and Privacy of IoT Devices?

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

Should I get CISA Certified?

CISA is possibly the one ‘pure’ Information systems audit qualification that is recognised anywhere. It is balanced between technical IT knowledge and business understanding. And it has lovely exam questions - and I should know, as I wrote ...

Cyber Mayday and My Journey to Oz

When we persevere through difficulties our results are often better than initially expected. Here’s a story of how pandemic disappointments and travel problems led to new professional opportunities.   The post Cyber Mayday and My Journey to Oz ...

Week in review: 10 must-read cybersecurity books, AnyDesk hack, Patch Tuesday forecast

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: How CISOs navigate policies and access across enterprises In this Help Net Security interview, Marco Eggerling, Global CISO at Check Point, ...

Identification Documents: an Obsolete Fraud Countermeasure

When I'm talking to bankers and other fraud fighters, I often mention how easy it is for a criminal to obtain a Drivers License bearing any information they desire. I was reminded of this again as I saw the sentencing of Desmond Nkwenya from ...

List of IT Audit Professional Bodies & Certifications

The below list covers the key professional bodies and certifications to consider as part of an IT Audit career. Bear in mind that there are many different routes and the qualifications that are right for you will depend on your interests, ...