Application Security News and Articles


USENIX Security ’23 – Hailun Ding, Juan Zhai, Yuhong Nan, Shiqing Ma – ‘AIRTAG: Towards Automated Attack Investigation By Unsupervised Learning With Log Texts’

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

USENIX Security ’23 – Noé Zufferey, Mathias Humbert, Romain Tavenard, Kévin Huguenin ‘Watch Your Watch: Inferring Personality Traits From Wearable Activity Trackers’

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

MY TAKE: Rising geopolitical tensions suggest a dire need for tighter cybersecurity in 2024

Russia’s asymmetrical cyber-attacks have been a well-documented, rising global concern for most of the 2000s. Related: Cybersecurity takeaways of 2023 I recently visited with Mihoko Matsubara, Chief Cybersecurity Strategist at NTT to discuss ...

Data In-Flight: Applying Zero Trust to Airline Travel and Content Security

No matter which airport you travel through or how many times you travel through it, one element remains the same – the security check(s). Whether you’re asked to take off your shoes, put your laptop in a separate bin, or leave it all together ...

Randall Munroe’s XKCD ‘Definitely’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Definitely’ appeared first on Security Boulevard.

The (Face-)Book of Mammon [book review]

I have, at best, an uneasy relationship with Facebook. To paraphrase something that I’m writing at the moment (more about that shortly): I first subscribed to Facebook because I was working in IT security research and needed to find out more ...

MDR’s Enduring Value – Beyond Buzzwords

You might’ve heard about the usefulness of managed detection response in providing round-the-clock monitoring, detection and response for cybersecurity incidents. But why does MDR have such enduring value for infosec teams? What explains the ...

USENIX Security ’23 – ‘Auditory Eyesight: Demystifying μs-Precision Keystroke Tracking Attacks On Unconstrained Keyboard Inputs’

Yazhou Tu, Liqun Shan, Md Imran Hossen, Sara Rampazzi, Kevin Butler, Xiali Hei Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating ...

What Is Endpoint Security Management and Why Is It Important?

Among all IT components, endpoints are the easiest to exploit, making them the most vulnerable to cyberattacks. This makes endpointRead More The post What Is Endpoint Security Management and Why Is It Important? appeared first on Kaseya. The ...

AI In Windows: Investigating Windows Copilot

By Yarden Shafir AI is becoming ubiquitous, as developers of widely used tools like GitHub and Photoshop are quickly implementing and iterating on AI-enabled features. With Microsoft’s recent integration of Copilot into Windows, AI is even on ...

How Cache Purge Helps Keep Your Website Content Fresh and Responsive

Content Delivery Networks (CDNs) accelerate web traffic across the internet through servers residing in strategic locations (known as points of presence or PoPs) across the globe. Each PoP has a number of caching servers, each of which contains a ...

Above 30% Apps at Risk with Vulnerable Log4j Versions

An alarming 38% of applications that use the Apache Log4j library use the versions susceptible to security vulnerabilities. One of them is a critical vulnerability, Log4Shell (CVE-2021-44228), for which patches have been available for over two ...

NSFOCUS Zero Trust Solution Makes It Into The Security Service Edge Solutions Landscape Report

SANTA CLARA, Calif., Dec 27, 2023 – NSFOCUS, a global provider of intelligent hybrid security solutions, today announced that NSFOCUS is included in the Security Service Edge Solutions Landscape for Q4 2023 recently published by Forrester, an ...

Importance of IoT Live Patching: Protecting Your Connected Devices

The conventional patching method necessitates a reboot. Live patching eliminates the need to reboot the system. KernelCare IoT automates patching for Linux-based IoT devices.   With so many ecosystems woven with different devices, the need for ...

Kyivstar Cyber Attack: Ukraine Telecom Operator Paralyzed

Ukraine’s largest telecom operator, Kyivstar, was recently shut down after falling prey to a cyberattack. The Kyivstar cyber attack left millions of Ukrainians without access to cellular or internet services. Recent reports have cited the ...

OpenSSH Command Injection Vulnerability (CVE-2023-51385) Alert

Overview Recently, NSFOCUS CERT detected that OpenSSH released a security update and fixed a command injection vulnerability caused by malicious shell characters (CVE-2023-51385), with a CVSS score of 9.8; Since there is no security filtering of ...

Apache OFBiz Arbitrary File Reading and Remote Code Execution Vulnerabilities (CVE-2023-50968/CVE-2023-51467) Alert

Overview Recently, NSFOCUS CERT detected that Apache officially released a security announcement and fixed two high-risk vulnerabilities in Apache Ofbiz. CVE-2023-50968: Due to problems in Apache Software Foundation, unauthorized attackers can ...

How to incorporate human-centric security

Cybersecurity is awash in threat detection and mitigation solutions: SIEM, DLP, SOAR, MDR, EDR, XDR, and more. Threat detection is essential, as it serves to locate and minimize the threat as quickly and effectively as possible. However, some ...

5 free generative AI courses you can take right now

Generative AI (GenAI) is a form of artificial intelligence technology focused on generating new content. This can include text, images, audio, and other media types. It’s a rapidly evolving field with significant implications in various ...

Essential DDoS statistics for understanding attack impact

The impact of DDoS attacks extends far beyond mere inconvenience, as they can result in financial losses, compromised data, and erosion of customer trust. Understanding the nature and consequences of DDoS activity is essential for organizations ...