Application Security News and Articles


What is Azure Policy: All You Need to Know

What is Azure Policy? Azure Policy is a service within Microsoft Azure that allows organizations to create, assign, and manage policies. These policies define rules and effects over resources, identities, and groups, in an effort to ensure ...

Cybersixgill introduces new features and capabilities to strengthen threat analysis

Cybersixgill announced new features and capabilities that take security teams’ threat detection and mitigation efforts to new levels, helping them identify and mitigate vulnerabilities and detect and stop threats more quickly and effectively. ...

In Pursuit of a Passwordless Future

The passwordless future feels close because we have the technology to do it, but progress will be slow as applications are migrated to adopt passwordless authentication. The post In Pursuit of a Passwordless Future appeared first on Security ...

Malwarebytes unveils vulnerability assessment module to help users identify critical vulnerabilities

Malwarebytes announced its comprehensive vulnerability assessment module is now included in every ThreatDown bundle at no additional cost via its integrated console. Many IT organizations are struggling with rising cybersecurity costs associated ...

Developers behaving badly: Why holistic AppSec is key

A recent survey shows that untested software releases, rampant pushing of unvetted and uncontrolled AI-derived code, and bad developer security are all culminating to seriously expand security risks across software development. Add in the ...

Spying through Push Notifications

When you get a push notification on your Apple or Google phone, those notifications go through Apple and Google servers. Which means that those companies can spy on them—either for their own reasons or in response to government demands. Sen. ...

Daon xSentinel minimizes generative AI voice fraud

Daon announced the addition of xSentinel, an expansion of its AI.X technology. xSentinel provides adaptive synthetic voice protection to create a layer of defense within any voice communication channel and enhance the identity verification ...

Webinar Recap: Building your Product Security Roadmap

In-depth recap of our hands-on product security webinar with James Berthoty—gather the best knowledge and insights! The post Webinar Recap: Building your Product Security Roadmap appeared first on Security Boulevard.

1Kosmos partners with AWS to offer MFA for customer use cases

1Kosmos announced it has completed the integration of its 1Kosmos BlockID platform with Amazon Cognito. As an AWS Advanced Technology Partner, 1Kosmos enables Amazon customers to seamlessly add passwordless multi-factor authentication (MFA) to ...

Researchers automated jailbreaking of LLMs with other LLMs

AI security researchers from Robust Intelligence and Yale University have designed a machine learning technique that can speedily jailbreak large language models (LLMs) in an automated fashion. “The method, known as the Tree of Attacks with ...

PCI 4.0: Your Next Audit May Take Longer, But it’s for a Good Cause 

By: Brian Dean, Senior Security Consultant, QSA Change is in the Air  2024 is almost here, and that means PCI DSS 4.0 will soon go into effect. The newest version will have some mandatory controls on March 31, 2024, for those who store, process, ...

What is NIST AI RMF?

As artificial intelligence gains traction and becomes increasingly more popular, it is critical to understand the risks that apply to companies who are creating AI tools. As NIST explains, the main risks associated with developing an AI system ...

Datto Networking and VSA: Your Shortcut to Smarter Networks

Your network management challenges are now a thing of the past. In keeping with our commitment to deliver world-class integrationsRead More The post Datto Networking and VSA: Your Shortcut to Smarter Networks appeared first on Kaseya. The post ...

Top Security Trends and Predictions for 2024

Approov stands at the forefront of mobile cybersecurity: Our expansive customer base, ongoing research initiatives and the insights we collect from our live threat metrics, give us unique visibility into trends in mobile security. Based on this ...

Penetration Testing for Startups and Small Businesses

While building products and launching ten many things, security takes a back seat, especially for bootstrap startups where everyone is running multiple projects. The ROI of penetration testing cannot be calculated directly, it can be calculated ...

Top 5 Strategies for Vulnerability Mitigation

Whether you are an SMB looking for advice as to where to start with security vulnerability management or an IT professional looking to develop and mature your security programs, read on to discover how you can help protect your organization from ...

Ransomware in 2024: Anticipated impact, targets, and landscape shift

As ransomware continues to be on the rise, we can expect groups to continue to evolve their attacks and operate at a larger scale for bigger profits. This will put organizations at higher risk if they don’t adopt a more aggressive security ...

Using AI and automation to manage human cyber risk

Despite advanced security protocols, many cybersecurity incidents are still caused by employee actions. In this Help Net Security video, John Scott, Lead Cybersecurity Researcher at CultureAI, discusses how integrating AI and automation into your ...

OpenTofu: Open-source alternative to Terraform

OpenTofu is an open-source alternative to Terraform’s widely used Infrastructure as Code provisioning tool. Previously named OpenTF, OpenTofu is an open and community-driven response to Terraform’s recently announced license change ...

The Imperative for Zero Trust in a Cloud-Native Environment

What is Zero Trust Security? Zero-trust security is not a specific technology or product, but a security model based on the concept that “All entities are untrusted”. Forrester defines zero trust as “Zero Trust is an information security ...