Application Security News and Articles


VikingCloud THOR AI offers real-time interactive analytics

VikingCloud announced THOR AI (Threat Hunting and Orchestrated Response), a generative AI-powered cybersecurity chatbot. The new complimentary cyber defense tool is designed to assist companies of all sizes find more vulnerabilities faster – ...

US Sanctions Three for Cyber Work for ISIS

The United States is hitting two Egyptian nationals with sanctions for allegedly creating and maintaining a platform used to train members of the ISIS terrorist group in cybersecurity and to support its funding and recruitment. The Treasury and ...

Omada introduces real time identity governance

Omada introduced the next generation of Omada Identity Cloud, Horizons. Built on a modern, cloud-native microservice architecture, Omada will deliver speed, intelligent decision support, connectivity and higher operational efficiency. Omada ...

Protect AI Acquires Laiyer AI to Better Secure AI Models

Protect AI has acquired Laiyer AI, a provider of open source software used to protect LLMs from security threats. The post Protect AI Acquires Laiyer AI to Better Secure AI Models appeared first on Security Boulevard.

Confronting the SaaS Data Protection and Security Crisis

For all the benefits that SaaS provides, data protection and security is most often found wanting. The post Confronting the SaaS Data Protection and Security Crisis appeared first on Security Boulevard.

Aim Security raises $10 million to unlock the full potential of GenAI technology

Aim Security announced $10 million in seed funding, led by YL Ventures, with participation from CCL (Cyber Club London), the founders of WIZ and angel investors from Google, Proofpoint and Palo Alto Networks. Aim Security was founded by ...

Eliminating Manual AppSec Practices with Active ASPM

OX Security has proudly announced the launch of our pioneering Active Application Security Posture Management (Active ASPM) platform. My pride in our team’s dedication and development in bringing this solution to life is boundless. Yet my focus ...

CISO accountability in the era of software supply chain security

Cybersecurity leaders are well aware that the industry is constantly evolving. Whether dealing with the kinds of threats organizations face or the security tools best fit to mitigate them, today’s leaders understand that they have to stay on ...

Press Release: OX Security Unveils the First Active Application Security Posture Management Platform to Eliminate Manual Practices

Boston, MA and Tel Aviv, Israel – January 31, 2024 –  OX Security, the pioneer in scaling application security (AppSec) practices and a founding member of the Open Software Supply Chain Attack Reference (OSC&R) framework, announced the ...

ProcessUnity unveils all-in-one platform for third-party risk management

ProcessUnity announced the completed integration of the Global Risk Exchange, making it the all-in-one risk platform for modernizing TPRM (Third-party risk management). Now, via a single combined offering, risk executives can positively transform ...

Veza integrates with Google Drive to secure access to enterprise files

Veza announced an integration with Google Drive, the popular file storage and synchronization service. With this integration, Veza customers can now secure access to files like docs and spreadsheets that are stored in Google Drive. Identity is ...

Como executar o SAST localmente em projetos Java

Veja como é possível identificar vulnerabilidades nas suas dependências com SAST e conseguir isso executando localmente, sem a necessidade…Continue reading on Medium »

Unveiling the AWS Public IP Puzzle: Solvo’s Query and Cost-Saving Tips

As we all heard back in July 2023, as of February 1st, 2024 AWS will start charging for public IPv4 addresses. The pricing is per resource, per hour. Meaning that for every EC2 you own, that works 24/7, you’ll pay an additional $3.6 a month. ...

Unraveling the Threat of New Docker Malware Campaign

In recent times, Docker services have become a focal point for malicious actors seeking innovative ways to monetize their exploits. A recent discovery by cloud security firm Cado unveils a new Docker malware campaign that employs a dual-pronged ...

Free ransomware recovery tool White Phoenix now has a web version

White Phoenix is a free ransomware recovery tool for situations where files are encrypted with intermittent encryption. It was tested on BlackCat/ALPHV Ransomware, Play Ransomware, Qilin/Agenda Ransomware, BianLian Ransomware, and DarkBit. ...

Navigating TuxCare’s Enterprise Support for AlmaLinux

Get an additional 6 years of lifecycle support after the standard 10-year lifecycle   Includes automated live patching tools (KernelCare Enterprise and LibCare)   Enterprise-grade assistance for AlmaLinux and various open-source packages ...

 Monetizing Email Security: Osh.co.za’s DMARC Success Story

Explore the shared story of Osh.co.za and EasyDMARC! ... The post  Monetizing Email Security: Osh.co.za’s DMARC Success Story appeared first on EasyDMARC. The post  Monetizing Email Security: Osh.co.za’s DMARC Success Story appeared first ...

Threat Actors Using Adult Games To Launch Remcos RAT Attack

In a recent cyber threat development, the notorious Remcos RAT attack has shifted its focus towards South Korean users, leveraging files shared on the Webhards platform. This unsettling trend involves hackers using a clever ruse – enticing ...

Does CVSS 4.0 solve the exploitability problem?

The newest version of the vulnerability scoring system CVSS 4.0 is here! After a lengthy gap between version 3 (released in 2015), as of November 2023 version 4.0 is officially live. Building iteratively on version 3 there are a few differences ...

Proactive cybersecurity: A strategic approach to cost efficiency and crisis management

In this Help Net Security interview, Stephanie Hagopian, VP of Security at CDW, discusses offensive strategies in the face of complex cyberattacks and the role of the zero-trust model. The conversation also covers the essential steps for a ...