Application Security News and Articles


Tapping into the Potential of Generative AI in Cybersecurity

If ever there was a technology of the moment, it is generative AI. Thanks to the breakout success of OpenAI’s ChatGPT offering, the tech has achieved unprecedented global awareness—from the home user to the corporate boardroom. And although ...

Aembit Announces New Workload IAM Integration with CrowdStrike to Help Enterprises Secure Workload-to-Workload Access

Silver Spring, Maryland, January 30th, 2024, Cyberwire Aembit Becomes the First Workload IAM Platform to Integrate with the Industry-Leading CrowdStrike Falcon Platform to Drive Workload Conditional Access Aembit, the Workload Identity and Access ...

Turning Materiality Talk into Action

The discussion around materiality can be overwhelming Materiality calculations have been a concept at public companies for 90 years. The SEC formulated the Securities Act of 1933 and the Securities Read More The post Turning Materiality Talk into ...

CVE-2024-23897: Check Critical Jenkins Arbitrary File Like Vulnerability Now!

On 24 January 2024, the Jenkins team issued a security advisory disclosing a critical vulnerability that affects the Jenkins CI/CD tool. Jenkins is a Java-based open-source automation server run by […] The post CVE-2024-23897: Check Critical ...

3 Best Practices to Improve Threat Hunting

Threat-hunting programs can proactively monitor malicious activity, find vulnerabilities and put organizations on the offensive. The post 3 Best Practices to Improve Threat Hunting appeared first on Security Boulevard.

SentinelOne unveils threat hunting capabilities in its WatchTower and WatchTower Pro

Organizations today face a relentless pace of sophisticated cyber attacks that they must be able to swiftly detect and neutralize to keep their assets and infrastructure safe. But many lack the time and resources to pull this off. To help them, ...

Siren launches AI-Powered search with mobile access for front line officers

Siren has launched a new AI-Powered search with mobile access as part of its latest release and its Siren for Law Enforcement product bundle. Siren provides a complete suite of investigation tools for contemporary challenges such as police ...

NordVPN Link Checker protects users from malicious websites

NordVPN launches its new experimental product from the NordLabs platform. Link Checker is a manual URL-checking tool that enables users to examine a website’s safety before visiting by scanning it for different types of malware and getting ...

KuppingerCole Recognizes Cequence Unified API Protection Platform

API security continues to elevate in terms of awareness and importance in both government and commercial sectors. Organizations need to ensure that their APIs are secure, protected from attacks, abuse, fraud, and data losses. With a multitude of ...

SentinelOne Delivers Real-Time Managed Threat Hunting Services

SentinelOne expanded its managed threat hunting service that is now capable of continually identifying issues in real-time. The post SentinelOne Delivers Real-Time Managed Threat Hunting Services appeared first on Security Boulevard.

Kafka vs RabbitMQ

An Intro to Kafka and RabbitMQ: The Masters of Messaging In the realm of messaging systems, two names stand out: Kafka and RabbitMQ. These two powerhouses have become the go-to solutions for developers and organizations looking to handle ...

Self-managed GitLab installations should be patched again (CVE-2024-0402)

Less than two weeks after having plugged a security hole that allows account takeover without user interaction, GitLab Inc. has patched a critical vulnerability (CVE-2024-0402) in GitLab CE/EE again and is urging users to update their ...

HaystackID enhances Protect Analytics AI Suite to strengthen data analysis

HaystackID announced the expansion of its Protect Analytics AI Suite of AI enabled services designed to enhance the efficiency and effectiveness of identifying, analyzing, and reporting on sensitive information within large, unstructured ...

Qualys expands partnership with Orange Cyberdefense to optimize vulnerability management activities

Qualys announced that it is expanding its partnership with Orange Cyberdefense. This expansion signifies that Qualys’ capabilities such as Vulnerability Management, Detection and Response (VMDR) will be included in Orange ...

Ubuntu 22.04 Kernel Updated to Linux Kernel 6.5

Ubuntu 22.04 LTS was first released on 21 April 2021 and is supported until April 2027. The latest version of this long-term support release (5 years), Ubuntu 22.04.3 LTS, came out on August 10, 2023, with Linux kernel 6.2. However, Canonical has ...

Hundreds of network operators’ credentials found circulating in Dark Web

After the recent incident involving Orange España and the leakage of credentials from the RIPE NCC portal, which led to a major outage, the cybersecurity community needs to reconsider the digital identity protection for staff engaged in network ...

Bypass of System Access Controls

This article is part of a series where we look at a recent NSA/CISA Joint Cybersecurity Advisory on the top cybersecurity issues identified during red/blue team exercises operated by these organizations. In this article, you will find a more ...

Balada Injector Malware Compromises 7,000+ WordPress Sites

Threat actors have recently used the Balada injector malware to exploit a plugin vulnerability, leading to the compromise of more than 7,000 WordPress sites. Recent reports have shed light on the WordPress Balada injector infections, claiming ...

Great security or great UX? Both, please

A new user is signing up for a SaaS application. On the one hand, UX teams want that user to get into the app as quickly as possible. On the other hand, security teams want the user to strongly validate their identity and configure settings ...

Can MS Outlook Calendar Leak Your Password?

A new concern has surfaced for Outlook users! Accepting calendar invitations within the platform may now pose a serious risk to the security of user passwords. A recent Outlook vulnerability, patched in December 2023 is still hiding for unpatched ...