Application Security News and Articles


The Vulnerability Management Stack: 5 Essential Technologies

Vulnerability management encompasses hardware vulnerabilities, misconfigurations and other weaknesses a threat actor could potentially exploit. The post The Vulnerability Management Stack: 5 Essential Technologies appeared first on Security ...

Survey: Increased Volume and Sophistication of Cyberattacks Creating Higher Costs

Organizations are spending an average of $5.4 million to respond to compromises, with $2.36 million directly attributed to operational disruption. The post Survey: Increased Volume and Sophistication of Cyberattacks Creating Higher Costs appeared ...

PoC for easily exploitable Fortra GoAnywhere MFT vulnerability released (CVE-2024-0204)

Proof-of-concept (PoC) exploit code for a critical vulnerability (CVE-2024-0204) in Fortra’s GoAnywhere MFT solution has been made public, sparking fears that attackers may soon take advantage of it. Fortra’s GoAnywhere MFT is a ...

VIVOTEK VORTEX Connect empowers enterprise cloud transition

VIVOTEK introduces its cloud-based security service VORTEX, emphasizing a smarter and easier approach. Now featuring the latest addition – VORTEX Connect, this new feature is integrated into VIVOTEK’s latest generation Network Video ...

Understanding the Role of Automation in DevSecOps

Imagine scrolling through social media only to see your face plastered across the internet, alongside millions of others, in a massive…Continue reading on Codetru TechPulse »

Securiti collaborates with Lacework to improve data protection in the cloud

Securiti and Lacework announced a strategic partnership that allows customers to be smarter than ever when protecting cloud data. This collaboration unites Lacework, a Cloud Native Application Protection Platform (CNAPP), and Securiti’s Data ...

Stellar Cyber partners with Proofpoint to speed detection of email-driven cyberattacks

Stellar Cyber announced a new partnership with Proofpoint, a cybersecurity and compliance company. Through this alliance, Proofpoint and Stellar Cyber customers benefit from an out-of-the-box integration enabling swift email investigations and ...

What Is Professional Services Automation (PSA) Software?

In the dynamic world of IT services, the efficiency and management of operations are paramount. This blog post aims toRead More The post What Is Professional Services Automation (PSA) Software? appeared first on Kaseya. The post What Is ...

Multiple Go Vulnerabilities Fixed in Ubuntu

Go is an open-source programming language that has gained popularity for efficiency and simplicity. However, as with any software, vulnerabilities can lurk within its libraries and modules. It is essential to stay aware of these vulnerabilities ...

Are Bots Behind the Apple Vision Pro Pre-Order Sell Out?

Kasada has observed scalpers using bots to successfully pre-order thousands of the Apple Vision Pro 256GB. The post Are Bots Behind the Apple Vision Pro Pre-Order Sell Out? appeared first on Security Boulevard.

Improper Separation of User/Administrator Privilege in Cybersecurity

This article is part of a series where we look at a recent NSA/CISA Joint Cybersecurity Advisory on the top cybersecurity issues identified during red/blue team exercises operated by these organizations. In this article, you will find a more ...

Determining Cyber Materiality in a Post-SEC Cyber Rule World | Kovrr blog

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post Determining Cyber Materiality in a Post-SEC Cyber Rule World | Kovrr blog appeared first on Security Boulevard.

Python FBot Hacking: Cloud and SaaS Platforms Targeted

In the ever-evolving landscape of cybersecurity, a recent revelation has come to light – the emergence of a new Python-based hacking tool. Malicious activities initiated using the tool are being dubbed FBot hacking.  Cybercriminals are ...

The effect of omission bias on vulnerability management

Whether we’d like to admit it to ourselves or not, all humans harbor subconscious biases that powerfully influence our behavior. One of these is the omission bias, which has interesting ramifications in the world of cyber security, specifically ...

10 USA cybersecurity conferences you should visit in 2024

Security BSides Security BSides offers attendees an opportunity to engage and present their ideas actively. Characterized by its intensity, these events are filled with discussions, demonstrations, and interactive participation. BSides are ...

Prioritizing CIS Controls for effective cybersecurity across organizations

In this Help Net Security interview, Randy Marchany, CISO at Virginia Tech, discusses the challenges and strategies associated with implementing CIS Controls in organizations of varying sizes. Marchany explores the importance of securing ...

Why resilience leaders must prepare for polycrises

In this Help Net Security video, Frank Shultz, CEO of Infinite Blue, discusses how more frequent and severe disruptions and our increasingly interconnected world collide to create a new threat for resilience leaders to manage: polycrises. These ...

Organizations invest more in data protection but recover less

92% of organizations will increase 2024 data protection spend, to achieve cyber resilience amidst continued threats of ransomware and cyberattacks, according to Veeam Software. Respondents shared that cyberattacks remain the top cause of outages ...

Software supply chain attacks are getting easier

ReversingLabs identified close to 11,200 unique malicious packages across three major open-source software platforms in 2023: npm, PyPI, and RubyGems. These findings mark an astounding 1,300% increase in malicious packages from 2020 and an ...

Whitepaper: MFA misconceptions

While a valuable tool in the cybersecurity toolkit, MFA is not immune to weaknesses. Read the “MFA Misconceptions” whitepaper to understand its limitations and how integrating it with other robust security measures is crucial for ...