Application Security News and Articles


Faction: Open-source pentesting report generation and collaboration framework

Faction is an open-source solution that enables pentesting report generation and assessment collaboration. Josh Summitt, the creator of Faction, has always disliked the process of writing reports, preferring to focus on uncovering bugs. A key ...

Ransomware recap 2023 highlights cybersecurity crisis

In this Help Net Security video, Yochai Corem, CEO of Cyberint, explores the ransomware environment’s development, effects, and emerging patterns throughout the previous year. 2023 marked a historic high for ransomware groups, with a 55.5% ...

Progressive Profiling 101: Right User Info at the Right Time

An amazing post The post Progressive Profiling 101: Right User Info at the Right Time appeared first on Security Boulevard.

Unlocking sustainable security practices with secure coding education

Despite stringent regulations and calls for ‘security by design’, organizations are still failing to equip teams with the knowledge to secure code, according to Security Journey. In fact, only 20% of respondents were confident in their ...

Balancing AI benefits with security and privacy risks in healthcare

To manage an environment of increasing risks and limited resources, healthcare internal audit and compliance departments must align their risk assessments and audit work plans to areas most vital to achieving the strategic goals and business ...

An In-Depth Guide to the 11 New ISO 27001 Controls

From the crudest low-effort phishing attempts to the most sophisticated high-tech hacks, the hits never stop coming. An effective defense against these threats requires a consistent and comprehensive security posture like the one outlined in the ...

Control D Launches Control D for Organizations: Democratizing Cybersecurity for Organizations of All Sizes

Toronto, Canada, January 29th, 2024, Cyberwire In an era where online threats no longer discriminate by business size, Control D, powered by Windscribe VPN‘s robust security expertise, announced today the launch of ‘Control D for ...

Datadog Report Surfaces Pair of Sophisticated AWS Attacks

A Datadog report found that cybercriminal activity aimed specifically at AWS cloud infrastructure services is increasing. The post Datadog Report Surfaces Pair of Sophisticated AWS Attacks appeared first on Security Boulevard.

Public Trust Certificates: A 2023 Recap and Projections for 2024

Looking Back at 2023 2023 was a year of change for Public Trust Certificates –... The post Public Trust Certificates: A 2023 Recap and Projections for 2024 appeared first on Entrust Blog. The post Public Trust Certificates: A 2023 Recap and ...

USENIX Security ’23 – Yizheng Chen, Zhoujie Ding, David Wagner – # Continuous Learning for Android Malware Detection

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

CVE-2024-23897: Assessing the Impact of the Jenkins Arbitrary File Leak Vulnerability

CVE-2024-23897: Assessing the Impact of the Jenkins Arbitrary File Leak Vulnerability. The post CVE-2024-23897: Assessing the Impact of the Jenkins Arbitrary File Leak Vulnerability appeared first on Horizon3.ai. The post CVE-2024-23897: ...

Randall Munroe’s XKCD ‘Fast Radio Bursts’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Fast Radio Bursts’ appeared first on Security Boulevard.

USENIX Security ’23 – Rishabh Khandelwal, Asmit Nayak, Hamza Harkous, Kassem Fawaz – Automated Cookie Notice Analysis and Enforcement

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

Protecting Business from the Inside Out: A Layered Approach to Cybersecurity

Learn how taking an internal, layered approach to cybersecurity – including training staff, controlling access, monitoring activity, and incident planning – helps protect valuable company data and resources from compromise. The post ...

Decoding the Maze: A Guide to Cyber Security Risk Assessment Models

In today's digital age, organizations face the constant threat of cyber attacks. Safeguarding critical data and infrastructure requires a proactive approach, starting with a comprehensive cybersecurity risk assessment. However, choosing a ...

Introducing the Wallarm 2024 API ThreatStatsTM Report

The Wallarm Security Research team is pleased to share the latest version of our API ThreatStats report. This report serves as a key resource for API, Application security practitioners. It emphasizes the need for a proactive stance in API ...

Why CNAPP Will Be a Key Enabler for DevSecOps in 2024

CNAPP will be a key enabler for DevSecOps in 2024, as it is well-positioned to meet the security needs of the evolving cloud environment. The post Why CNAPP Will Be a Key Enabler for DevSecOps in 2024 appeared first on Security Boulevard.

Dynatrace acquires Runecast to improve cloud-native security

Dynatrace announced it signed a definitive agreement to acquire Runecast, a provider of AI-powered security and compliance solutions. Adding Runecast to the Dynatrace platform will extend Dynatrace contextual security protection and analytics ...

Improved SoD Results Accuracy

Improved SoD Results AccuracyUse enhanced AND/OR logic to exclude false positives for given rules and reduce the total number of violations that need to be remediated each period. False positives (you can read more about the details of false ...

Mitigate Enterprise Software Supply Chain Security Risks – Insights Into the Gartner Report

Gain insights into the Gartner® report and learn how to mitigate enterprise software supply chain risks by integrating software supply chain security into vendor risk management. The post Mitigate Enterprise Software Supply Chain Security Risks ...