Application Security News and Articles


Creating a New Market for Post-Quantum Cryptography

Quantum computing has the potential to disrupt the cybersecurity market and will spark the single largest IT systems upgrade in history. The post Creating a New Market for Post-Quantum Cryptography appeared first on Security Boulevard.

Podcast Episode 11: Special Guest from RVATech, Nick Serfass, CEO

Get ready for a very special Unmasked. Joining us in this episode is Nick Serfass, CEO of RVATech. For those not in the Richmond area, RVATech is on a mission to ignite the growth of the technology sector, the success of technology companies, and ...

Microsoft is working on a more secure print system for Windows

After announcing a gradual elimination of third-party printer drivers on Windows earlier this year, Microsoft has now unveiled its plan for enhancing security by introducting Windows Protected Print Mode (WPP). The problem with the current ...

Deception Tech: The Art of Cyber Counterintelligence

Deception technology is one of the most effective cybersecurity technologies available today. Here's how to use it. The post Deception Tech: The Art of Cyber Counterintelligence appeared first on Security Boulevard.

Qakbot returns in fresh assault on hospitality sector

The Qakbot botnet has been disrupted this summer, but cybercriminals are not ready to give up on the malware: Microsoft’s threat analysts have spotted a new phishing campaign attempting to deliver it to targets in the hospitality industry. ...

Defending Against AI-Based Cyber Attacks: A Comprehensive Guide

As attackers begin to use AI to improve their tactics, defenders are forced to develop effective measures to protect their data. The post Defending Against AI-Based Cyber Attacks: A Comprehensive Guide appeared first on Scytale. The post ...

MongoDB corporate systems breached, customer data exposed

Database management company MongoDB has suffered a breach: attackers have gained access to some of its corporate systems and customer data and metadata. The MongoDB breach “We detected suspicious activity on Wednesday (Dec. 13th, 2023) ...

Strobes 2023 Pentesting Recap: Trends, Stats, and How PTaaS is Transforming Cybersecurity

Like every year, we are releasing some research and analysis around our pen-testing in 2023. This article covers some amazing statistics on what category of vulnerabilities we commonly report across... The post Strobes 2023 Pentesting Recap: ...

Understanding the Zimbra Cross-Site Scripting Flaw (CVE-2023-37580)

The Zimbra XSS vulnerability allows an attacker to impact the confidentiality and integrity of the user's data. Understand how to find & fix this flaw. The post Understanding the Zimbra Cross-Site Scripting Flaw (CVE-2023-37580) appeared ...

Debunking Myths About Linux Kernel Patching

Automated tools simplify the Linux kernel patching process.   Most distributions provide patches through system updates.   Live patching eliminates the need to reboot the system.   Debunking Myths about Linux Kernel Patching   The kernel is ...

LLMs, Quantum Computing, and the Top Challenges for CISOs in 2024

CISOs must prepare for top challenges, including LLMs threats, quantum computing, the security-UX trade-off, and alignment with technological advancements The post LLMs, Quantum Computing, and the Top Challenges for CISOs in 2024 appeared first ...

MY TAKE: How decentralizing IoT could help save the planet — by driving decarbonization

The Internet of Things (IoT) is on the threshold of ascending to become the Internet of Everything (IoE.) Related:Why tech standards matter IoT is transitioning from an array of devices that we can control across … (more…) The post MY TAKE: ...

Code Execution Update: Improve WordPress Security

In the ever-evolving landscape of digital security, WordPress has recently released a critical code execution update, version 6.4.2, addressing a potential threat that could jeopardize the integrity of vulnerable sites. This update, triggered by ...

Correct bad network behavior to bolster application experience

Legacy hardware-based applications existed happily in isolation, untethered from a network. The thing that really mattered was the speed of the hard drive and having enough memory. Today, even the software running from personal hard drives relies ...

Creating a formula for effective vulnerability prioritization

In this Help Net Security interview, Michael Gorelik, CTO and Head of Malware Research at Morphisec, provides insights into the business impact of vulnerabilities. Gorelik discusses challenges posed by regulatory frameworks, incomplete asset ...

Information-blocking rule in 21st Century Cures Act redefines data exchange in healthcare

A Verato survey offers perspectives on the data management strategies of healthcare executives, highlighting the crucial role of Healthcare Master Data Management (hMDM) in addressing key gaps, facilitating seamless data exchange, and aligning ...

Preserving privacy through advanced encryption techniques

At its core, encryption involves the use of algorithms, mathematical functions that manipulate data into a seemingly random and indecipherable form. This encoded information, referred to as ciphertext, can only be converted back into its ...

xorbot: A Stealthy Botnet Family That Defies Detection

I. Background of xorbot In November 2023, NSFOCUS Global Threat Hunting System detected that a type of elf file was being widely distributed and accompanied by a large amount of suspected encrypted outbound communication traffic. However, the ...

The Top 5 Ransomware Takedowns

We discuss the latest ransomware takedowns in the fight against ransomware as law enforcement agencies and cybersecurity organizations successfully disrupt operations, seize infrastructure, and safeguard victims from further attacks. The post The ...

Securing the code: navigating code and GitHub secrets scanning

Welcome to the high-stakes world of GitHub, where your code isn't just a collection of functions and classes, but a treasure trove brimming with secrets — the VIPs of your digital... The post Securing the code: navigating code and GitHub ...