Application Security News and Articles


Verimatrix partners with AWS to increase reliability for OTT content security

Verimatrix collaboration with AWS to further bolster scalability, availability and ease of use for its Streamkeeper Multi-DRM cloud-based OTT content security platform. Streamkeeper Multi-DRM, a multi-tenant platform deployed on the AWS cloud, is ...

How Does Cybersecurity Services Prevent Businesses From Cyber Attacks?

In the contemporary digital landscape, new threats emerge constantly. If someone connects to the Internet, it exposes organizations to the risk of being targeted by hackers. Cyber threats have advanced into the industry, making security an ...

New infosec products of the week: February 2, 2024

Here’s a look at the most interesting products from the past week, featuring releases from BackBox, ProcessUnity, SentinelOne, and Vade. ProcessUnity unveils all-in-one platform for third-party risk management With a single, configurable ...

NIS2 Directive raises stakes for security leaders

In this Help Net Security interview, Roland Palmer, VP Global Operations Center at Sumo Logic, discusses key challenges and innovations of the NIS2 Directive, aiming to standardize cybersecurity practices across sectors. NIS2 mandates minimal ...

DDoS attack power skyrockets to 1.6 Tbps

DDoS attack trends for the second half of 2023 reveal alarming developments in their scale and sophistication, according to Gcore. The maximum attack power rose from 800 Gbps (1H 2023) to 1.6 Tbps. UDP floods continue to dominate, constituting ...

Passkeys and The Beginning of Stronger Authentication

Passkeys and The Beginning of Stronger Authentication madhav Fri, 02/02/2024 - 05:23 How passkeys are rewriting the current threat landscape Lillian, an experienced CISO, surveyed the threat landscape. Despite solid cybersecurity defenses ...

Crowdsourced security is not just for tech companies anymore

There is a misconception that only software and technology companies leverage crowdsourced security. However, data contradicts this belief. Companies across various sectors are increasingly adopting crowdsourced security, as reported by Bugcrowd. ...

EU adopts first cybersecurity certification scheme for safer tech

The European Commission adopted the implementing regulation concerning the EU cybersecurity certification scheme on Common Criteria (EUCC). The outcome aligns with the candidate cybersecurity certification scheme on EUCC that ENISA drafted in ...

Malicious logins from suspicious infrastructure fuel identity-based incidents

69% of identity-based incidents involved malicious logins from suspicious infrastructure, which are hosting providers or proxies that aren’t expected for a user or organization, according to Expel. Identity-based incidents accounted for 64% of ...

FBI Issues Ominous Warning of Imminent Cyber Attack on Critical Infrastructure

In testimony before the House Select Committee on the Chinese Communist Party yesterday, FBI Director Christopher Wray delivered an ominous message: “China’s hackers are positioning on American infrastructure in preparation to wreak havoc and ...

USENIX Security ’23 – Cas Cremers, Charlie Jacomme, Aurora Naska – Formal Analysis of Session-Handling in Secure Messaging: Lifting Security from Sessions to Conversations

Permalink The post USENIX Security ’23 – Cas Cremers, Charlie Jacomme, Aurora Naska – Formal Analysis of Session-Handling in Secure Messaging: Lifting Security from Sessions to Conversations appeared first on Security Boulevard.

Improving Cybersecurity: Different Certifications Explained

In the ever-evolving landscape of cybersecurity, the choice of cryptographic algorithms and certificates plays a pivotal role in ensuring the confidentiality and integrity of sensitive information.  While traditional methods such as the RSA ...

Diving into the 2024 Security Megatrends

Cybersecurity is a fast-paced and constantly changing industry. Ongoing technological advancements, new paradigms and evolving threat actor techniques make the landscape look different each year. Keeping up with the trends and changes is not only ...

What Will the Future of Cybersecurity Bring?

Our world is reliant on technology. It shapes and influences nearly everything we do—from the... The post What Will the Future of Cybersecurity Bring? appeared first on Security Boulevard.

HTTP response splitting exploitations & mitigations in Java

HTTP response splitting is a web security vulnerability that occurs when an attacker can inject malicious content into the HTTP response…Continue reading on Medium »

Telegram is a Wide-Open Marketplace for Phishing Tools

The encrypted messaging app Telegram has become a veritable marketplace for bad actors who want to launch effective phishing campaigns on the cheap, essentially democratizing the cyberthreat, according to researchers at cybersecurity firm ...

The SOC 2 Effect: Elevating Security and Trust in Netography Fusion

An insider’s view of some important lessons learned during Netography’s journey to achieve SOC 2 compliance and its benefits to our customers. The post The SOC 2 Effect: Elevating Security and Trust in Netography Fusion appeared first on ...

Randall Munroe’s XKCD ‘US Survey Foot’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘US Survey Foot’ appeared first on Security Boulevard.

Improved Security Agility and Adaptability with Dynamic Runtime Lists | Impart Security

We’re proud to announce Impart Security’s newest release, Dynamic Runtime Lists, which are purpose-built to enable security teams to streamline security operations with adaptive security techniques that quickly and intelligently respond to ...

Optimize Control Health Management Across Business Levels: Introducing Scopes

Managing controls across multiple business units becomes increasingly challenging and costly as operational requirements evolve. To help compliance leaders efficiently view and manage control health across product lines, geographies and business ...