Application Security News and Articles


Exploiting an API with Structured Format Injection

Learn how to use Structured Format Injection (SFI) through Server Side Parameter Pollution (SSPP) to exploit an API. The post Exploiting an API with Structured Format Injection appeared first on Dana Epp's Blog. The post Exploiting an API with ...

Google Whistles While OAuth Burns — ‘MultiLogin’ 0-Day is 70+ Days Old

What a Mickey Mouse operation: Infostealer scrotes having a field day with unpatched vulnerability. The post Google Whistles While OAuth Burns — ‘MultiLogin’ 0-Day is 70+ Days Old appeared first on Security Boulevard.

Top 5 Cyber Predictions for 2024: A CISO Perspective

Amidst the ever-evolving realm of enterprise security, a new year unfolds, introducing a dynamic array of emerging threats. While the “prediction season” gains momentum, it's pivotal to reflect on the high impact of the 2023 cybersecurity ...

USENIX Security ’23 – Anrin Chakraborti, Giulia Fanti, Michael K. Reiter – ‘Distance-Aware Private Set Intersection’

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

What is Protobuf?

The Introduction: Decrypting Protocol Buffers When navigating through the intricate world of data encoding and decoding mechanisms, Protocol Buffers, or widely known as Protobuf, have carved their position as a dynamic contender. The brainchild ...

Best of 2023: Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

Déjà Vu: Hack of WD systems leads to My Cloud service outage. Owners unable to access files. The post Best of 2023: Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!) appeared first on Security Boulevard.

In the News | ManagedMethods Wins Campus Technology & THE Journal New Product of the Year Awards

Campus Technology & THE Journal Names Winners of the 2023 New Product Awards BOULDER, Colo. – January 2nd, 2024 – Content Filter by ManagedMethods, the leading cloud security and safety platform for K-12 district technology teams, has won ...

Free Assets for Cybersecurity Testing and Training

Empowering your security team with 31 no-cost tools and resources for conducting cybersecurity testing and colleague awareness  As we enter 2024, staying ahead of threats without straining the budget is a significant and growing challenge. To ...

Poor Patch Management in Cybersecurity

This article is part of a series where we look at a recent NSA/CISA Joint Cybersecurity Advisory on the top cybersecurity issues identified during red/blue team exercises operated by these organizations. In this article, you will find a more ...

Secure Boot 101: Getting Started with Secure Boot

Secure Boot aims to add an additional layer of protection to the boot process, laying the foundation for overall computer security. Secure Boot technology, much like a vigilant guardian, ensures that only digitally signed and trusted components ...

Cyber Resilience Ahead: Forecasting the Application Security Testing Landscape

Application Security Testing involves the identification and mitigation of vulnerabilities within software applications. This process…Continue reading on Medium »

Alert: New Chrome Zero-Day Vulnerability Being Exploited

Google, in light of recent events, has launched a critical update for a high-severity Chrome zero-day vulnerability. As per recent reports, Google claims that the vulnerability has been actively exploited. It’s worth noting that the ...

48 NPM Packages Detected: Deploying on Developers’ Systems

A recent discovery revealed the presence of malicious software within an NPM package repository. These applications were created with certain features that, once installed on a computer system, would allow them to carry out unlawful acts. These ...

Key cybersecurity skills gap statistics you should be aware of

As the sophistication and frequency of cyber threats continue to escalate, the demand for skilled cybersecurity professionals has never been bigger. The skills gap is not merely a statistical discrepancy; it represents a substantial vulnerability ...

Hackers employ nuanced tactics to evade detection

Threat actors evolved tactics, opting for a more nuanced approach that spread attacks across a broader timeframe to blend in with legitimate traffic and evade detection during peak holiday shopping times, according to Cequence Security. 2023 ...

Wi-Fi 7’s mission-critical role in enterprise, industrial networking

As we transition from Wi-Fi 6 to the more advanced Wi-Fi 7, we uncover the significant enhancements in speed, efficiency, and spectrum usage that set it apart from its predecessors. In this Help Net Security interview, Tiago Rodrigues, CEO at ...

Cybercriminals set their sights on crypto markets

The cryptocurrency market has grown significantly, attracting both enthusiasts and investors. However, the rise of cryptocurrencies has also brought forth an unprecedented need for cybersecurity measures. Cybersecurity in the context of ...

Welcome To 2024

Hey folks, This is likely our last shot at preserving liberal democracy in the U.S., or at least avoiding 20–40 years of abject horribleness by wannabe bigoted and sociopathic demigods. The year 2024 is also set to be a significant year for ...

What is RabbitMQ?

Grasping the Basics: What is RabbitMQ? Take a step into the realm of software development, where efficient and smooth interaction between various applications is the linchpin. Here, we bring into the mix RabbitMQ. Going down to brass tacks, ...