Application Security News and Articles


Software supply chain security: Upgrade your AppSec for a new era

The software supply chain security landscape has shifted considerably over the last year. One of the most significant changes has been the move to a more formalized definition of the term "software supply chain security" and a better ...

The Cloudflare source code breach: Lessons learned

The high-profile web hosting company Cloudflare said last week that a sophisticated attacker gained access to code repositories used by the company, and made off with sensitive internal code. This was just the latest such attack targeting the ...

Delinea appoints Kate Reed as CMO

Delinea announced that Kate Reed has joined the company as Chief Marketing Officer (CMO). With more than two decades of experience in technology and cybersecurity, Reed assumes leadership of all marketing functions and initiatives and will play a ...

SOC 2 Audit: The Essentials for Data Security and Compliance

Read All the Essential Steps and Requirements for Preparing for a SOC 2 Audit to Ensure Data Security and Compliance. The post SOC 2 Audit: The Essentials for Data Security and Compliance appeared first on Scytale. The post SOC 2 Audit: The ...

NinjaOne raises $231.5 million to boost product innovation

NinjaOne announced it raised a $231.5 million Series C funding round led by ICONIQ Growth. Frank Slootman, Chairman and CEO of Snowflake; and Amit Agarwal, President of Datadog; among others also invested in the round. With this financing, ICONIQ ...

IBM LinuxONE 4 Express protects sensitive private data

IBM announced IBM LinuxONE 4 Express, extending the latest performance, security and AI capabilities of LinuxONE to small and medium sized businesses and within new data center environments. The pre-configured rack mount system is designed to ...

ResumeLooters target job search sites in extensive data heist

Group-IB identified a large-scale malicious campaign primarily targeting job search and retail websites of companies in the Asia-Pacific region. The group, dubbed ResumeLooters, successfully infected at least 65 websites between November and ...

EasyDMARC VS Proofpoint DMARC

Looking for email authentication and security software? This ... The post EasyDMARC VS Proofpoint DMARC appeared first on EasyDMARC. The post EasyDMARC VS Proofpoint DMARC appeared first on Security Boulevard.

RBVM Customized Dashboards: CFO Template

In the high-stakes arena of finance and cybersecurity, clarity is critical. Every data point holds the potential to shape your company’s destiny. But raw numbers alone tell only half the... The post RBVM Customized Dashboards: CFO Template ...

Cisco introduces new integrations across networking and security portfolios

Cisco introduced new capabilities and technologies across its networking portfolio that are designed to drive a more unified and integrated approach to managing and securing customer networks. IT organizations are looking to their technology ...

Rust Won’t Save Us: An Analysis of 2023’s Known Exploited Vulnerabilities

Introduction Memory safety issues have plagued the software industry for decades. The Cybersecurity & Infrastructure Security Agency (CISA) has been leading a charge for secure-by-design and encouraging developers and vendors […] The post ...

Lagging Mastodon admins urged to patch critical account takeover flaw (CVE-2024-23832)

Five days after Mastodon developers pushed out fixes for a remotely exploitable account takeover vulnerability (CVE-2024-23832), over 66% of Mastodon servers out there have been upgraded to close the hole. About Mastodon Mastodon is open-source ...

How CISOs navigate policies and access across enterprises

In this Help Net Security interview, Marco Eggerling, Global CISO at Check Point, discusses the challenge of balancing data protection with diverse policies, devices, and access controls in a distributed enterprise. He also highlights the ...

3 ways to achieve crypto agility in a post-quantum world

Working at the speed of digital business is a constant challenge. But in today’s increasingly automated operational environment, crypto agility—i.e., an organization’s ability to (at the moment of compromise) switch rapidly and seamlessly ...

10 must-read cybersecurity books for 2024

Our list of cybersecurity books has been curated to steer your professional growth in 2024. This selection aims to provide comprehensive information security insights and knowledge, ensuring you stay ahead in your career learning journey ...

Exploring NIST Cybersecurity Framework 2.0

In this Help Net Security video, Dan Erel, VP of Security at SeeMetrics, discusses NIST Cybersecurity Framework (CSF) 2.0. NIST CSF is based on existing standards, guidelines, and practices for organizations to manage and reduce cybersecurity ...

Paying ransoms is becoming a cost of doing business for many

Today’s pervasive cyberattacks are forcing the majority of companies to pay ransoms and break their ‘do not pay’ policies, with data recovery deficiencies compounding the problem, according to Cohesity. In fact, most companies have paid a ...

iOS sideloading & alternative app stores: Preparing for increased brand risk this March

In March 2024 (less than 30 days), Apple’s iOS 17.4 will for the first time ever allow iOS sideloading or the download of iOS apps from alternative app stores other than the Apple App Store. Whether you applaud the resulting expansion of ...

2023 Cybersecurity Regulation Recap (Part 3): Privacy Protection

In 2023, countries worldwide continued to strengthen their cybersecurity capabilities and systems in response to their national needs, using regulatory means to enhance their cybersecurity management. Based on continuous tracking and research, ...

Key Differences Between Two-Factor Authentication (2FA) and Multi-Factor Authentication (MFA)

Two-factor authentication and multi-factor authentication are often used interchangeably; however, that’s not the case. Both authentication methods aim to strengthen security protocols and fortify security, but they differ. With this blog, ...