Application Security News and Articles


Critical Start Asset Visibility helps customers become more proactive within their security program

Critical Start launched their Asset Visibility offering. As part of an MCRR strategy, Asset Visibility helps customers become more proactive within their security program, helping them uncover assets that need protection, validate that the ...

Infostealers Abuse Google OAuth Endpoint to ‘Revive’ Cookies, Hijack Accounts

The exploitation of an undocumented Google OAuth endpoint, MultiLogin, by various information-stealing malware strains has raised significant concerns within the cybersecurity landscape. This critical vulnerability, discovered by security ...

TrustCloud Named Security Innovation of the Year (SMB) by the Cloud Awards

Boston MA—January 9, 2024—TrustCloud™, the Trust Assurance platform using AI to upgrade GRC into a profit center, announced today it has been recognized with the Security Innovation of the Year (SMB) award in the 2023-2024 Cloud Awards ...

USENIX Security ’23 – ‘HorusEye: A Realtime IoT Malicious Traffic Detection Framework Using Programmable Switches’

Authors/Presenters: Yutao Dong, Qing Li, Kaidong Wu, Ruoyu Li, Dan Zhao, Gareth Tyson, Junkun Peng, Yong Jiang, Shutao Xia, Mingwei Xu Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the ...

Dell Survey Surfaces Lack of Ransomware Resiliency

A Dell survey found many organizations experienced a cyberattack in the last year, with 85% paying ransoms to access data. The post Dell Survey Surfaces Lack of Ransomware Resiliency appeared first on Security Boulevard.

The Elephant In the Room – NTLM Coercion and Understanding Its Impact

Since introducing NTLM coercion techniques such as PetitPotam into the NodeZero platform, we frequently have security practitioners request help understanding these techniques and what impact they have to their enterprise. […] The post The ...

Attackers could use vulnerabilities in Bosch Rexroth nutrunners to disrupt automotive production

Researchers have discovered over two dozen vulnerabilities in “smart” cordless nutrunners (i.e., pneumatic torque wrenches) manufactured by Bosch Rexroth that could be exploited to make the devices inoperable or their output ...

ID R&D introduces voice clone detection to protect users against audio deepfakes

ID R&D introduced voice clone detection as a new option for its IDLive Voice liveness detection product. Detecting voice clones and audio deepfakes can prevent fraud and crime, deter bad actors, and help preserve trust in the authenticity of ...

Whitepaper: OVERCOMING THE LIMITS OF LEGACY DETECTION TOOLS IN TODAY’S THREAT LANDSCAPE WITH ADVANCED AI

The history of cybersecurity is a tale of constant evolution, marked by the rise and fall of various defense mechanisms in the face of ever-changing threats. Security tools such as antivirus software and firewalls have long been the stalwarts of ...

Harnessing the Power of Trillions: DataDome Continues to Expand Signals Collection For Most Accurate ML Detection Models

DataDome has been leading the way in bot detection accuracy without compromise for years and has recently achieved a remarkable milestone by growing their signals collection from 3 trillion to a staggering 5 trillion per day. Learn why ...

️ Fortifying The Matrix: Battling the Invisible Cyber Agents in Our Software Supply Chain ️‍♂️

Defending the Digital Matrix: Securing the Software Supply Chain with Cybersecurity Measures 🛡️🌐Continue reading on Technology Hits »

Silex Technology AMC Protect improves cybersecurity for critical devices

Silex Technology announced their new protection service product offering called AMC Protect, a robust software management service designed to monitor and remedy vulnerabilities. AMC Protect targets customers utilizing Silex’s embedded ...

Coming March 2024: How to Prepare for PCI DSS Version 4.0 Compliance

Full compliance rates for PCI DSS remain low. A 2022 Verizon report claims that only 43% of assessed organizations maintained full compliance in 2020. With the March 2024 deadline fast approaching, businesses that process and store card data are ...

Cloudflare Report Surfaces Lots of API Insecurity

More than 15,000 accounts using Cloudflare had API endpoints that were only discovered using machine learning algorithms. The post Cloudflare Report Surfaces Lots of API Insecurity appeared first on Security Boulevard.

Delinea acquires Authomize to help organizations reduce identity-related risk

Delinea announced it has acquired Authomize, an innovator in the detection and elimination of identity-based threats across the cloud. The continuous discovery and visibility capabilities of Authomize, married with Delinea’s SaaS solutions for ...

Deciphering Cybersecurity Vulnerabilities Requires Context

Cybersecurity context is the missing puzzle piece that can transform a jumble of information into a clear and coherent picture of vulnerabilities. The post Deciphering Cybersecurity Vulnerabilities Requires Context appeared first on Security ...

Browser security is the key to stopping ransomware attacks

Ransomware continues to frustrate enterprise security teams. These advanced attacks use adaptive and evasive tactics to bypass traditional security tools, infiltrate endpoints, spread through the network, and deliver their harmful payloads. More ...

Viavi enhances Observer Platform to maximize network availability, productivity and compliance

Viavi Solutions announced significant enhancements to the Observer Platform allowing IT teams to further maximize network availability, productivity and compliance. The enhancements include critical new capabilities in End-User Experience (EUE) ...

My Yearly Look Back, a Look Forward and a Warning

2023 saw cybersecurity and privacy law arrive at a crossroads, especially with regard to the regulatory landscape. Mark Rasch explains. The post My Yearly Look Back, a Look Forward and a Warning appeared first on Security Boulevard.

SAP Patch Day: January 2024

SAP Patch Day: January 2024 ltabo Tue, 01/09/2024 - 12:44 Highlights of January SAP Security Notes analysis include: January Summary—12 new and updated SAP security patches released, including three HotNews Notes and four High Priority ...