Application Security News and Articles


Are Passwords Killing Your Customer Experience?

Businesses are striving to create better customer experiences, but reliance on password-based authentication is holding them back. The post Are Passwords Killing Your Customer Experience? appeared first on Security Boulevard.

Metomic for ChatGPT identifies critical risks in ChatGPT conversations

Metomic launched Metomic for ChatGPT, a technology that gives IT and security leaders full visibility into what sensitive data is being uploaded to OpenAI’s ChatGPT platform. The easy-to-use browser plugin enables businesses to take full ...

Secureworks Applies Multiple Forms of AI to Assess Threat Risks

Secureworks threat score capability leverages artificial intelligence (AI) within its Taegris extended detection and response (XDR) platform. The post Secureworks Applies Multiple Forms of AI to Assess Threat Risks appeared first on Security ...

AnyDesk has been hacked, users urged to change passwords

AnyDesk Software GmbH, the German company behind the widely used (and misused) remote desktop application of the same name, has confirmed they’ve been hacked and their production systems have been compromised. The statement was published on ...

Two Practical Examples of Modern Cloud SecOps

These two examples of of core principles should help any SecOps team improve their cloud security operations.  The post Two Practical Examples of Modern Cloud SecOps appeared first on Security Boulevard.

How to comply with GDPR requirements

Understanding the Basics of GDPR Compliance Within the sphere of cybersecurity, significant strides were made as the European Union (EU) introduced an innovative legislative tool called the General Data Protection Regulation (GDPR), unveiled on ...

Alert: Jenkins Vulnerabilities Open Servers To RCE Attacks

Jenkins, an influential Java-based open-source automation platform celebrated for its extensive plugin ecosystem and continuous integration capabilities, recently unveiled a series of vulnerabilities in its offerings. One particularly critical ...

Latio Application Security Tester: Use AI to scan your code

Latio Application Security Tester is an open-source tool that enables the usage of OpenAI to scan code from the CLI for security and health issues. Features and future plans James Berthoty, the creator of Latio Application Security Tester, told ...

Researchers discover exposed API secrets, impacting major tech tokens

Escape’s security research team scanned 189.5 million URLs and found more than 18,000 exposed API secrets. 41% of exposed secrets were highly critical, i.e. could lead to financial risks for the organizations. Exposed API secrets The exposed ...

Businesses banning or limiting use of GenAI over privacy risks

Privacy is much more than a regulatory compliance matter. Findings from a new Cisco study highlight the growing Privacy concerns with GenAI, trust challenges facing organizations over their use of AI, and the attractive returns from privacy ...

How cybersecurity strategies adapt to evolving threats

Cybersecurity strategies are essential components of modern organizations, designed to protect digital assets, sensitive information, and overall business continuity from potential cyber threats. As technology advances, the complexity and ...

Migrating to the cloud: An overview of process and strategy

Over the next few years, the number of organizations navigating to the cloud to advance their business goals is expected to grow exponentially. According to Gartner, more than 70% of enterprises will use cloud platforms to accelerate their ...

Empowering Organizational Resilience: A Comprehensive Deep Dive into Static Application Security…

In an age where digital landscapes are continually evolving, ensuring the impregnability of organizational systems has become an…Continue reading on Medium »

Integração SAST — Semgrep com Gitlab CI-CD

Semgrep é uma ferramenta de análise estática de segurança (SAST — Static Application Security Testing) que ajuda a identificar…Continue reading on Medium »

2022 End of Year Roundup

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post 2022 End of Year Roundup appeared first on Security Boulevard.

USENIX Security ’23 – MorFuzz: Fuzzing Processor Via Runtime Instruction Morphing enhanced Synchronizable Co-simulation

Authors/Presenters: Jinyan Xu, Yiyuan Liu, Sirui He, Haoran Lin, Yajin Zhou, Cong Wang Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

Balbix Now Integrates BAS Data Into Your Risk Analysis

I’ve got some exciting news about our latest integration with Breach and Attack Simulation (BAS) tools XM Cyber and Cymulate. You know we at Balbix are all about helping our customers stay ahead of the curve when it comes to managing ...

New Book Offers Approachable Guide for Teaching Cybersecurity

Looking for a handbook for teaching the cybersecurity body of knowledge in a conventional classroom setting? Read this book by Daniel Shoemaker, Ken Sigler and Tamara Shoemaker. The post New Book Offers Approachable Guide for Teaching ...

Week in review: Windows Event Log zero-day, exploited critical Jenkins RCE flaw

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Prioritizing cybercrime intelligence for effective decision-making in cybersecurity In this Help Net Security interview, Alon Gal, CTO at Hudson ...

USENIX Security ’23 – Kenneth G. Paterson, Matteo Scarlata, Kien Tuong Truong – Three Lessons From Threema: Analysis of a Secure Messenger

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...