Application Security News and Articles


Veeam Data Platform 23H2 update enhances resilience against ransomware

Veeam Software released new Veeam Data Platform 23H2 update, including Veeam Backup & Replicationv12.1 release as well as Veeam ONE v12.1 and Veeam Recovery Orchestrator v7. This latest release from Veeam, with a focus on radical resilience, ...

Analyzing the SonicWall Custom Grub LUKS Encryption Modifications

Overview Recently, we decided to perform some reverse engineering of the SonicWall NSv appliance to identify any potential remote code execution vulnerabilities within the appliance. During our initial analysis of a virtual machine image for the ...

MixMode platform enhancements boost threat detection and response

MixMode announced its quarterly product release. This release gives customers greater visibility into their digital attack surface, improved investigation capabilities, and increased customization options. Key features and enhancements include: ...

What the Future Holds for Data Security

With the proliferation of data in all aspects of life, from personal information to business operations, its protection becomes more critical than ever. The post What the Future Holds for Data Security appeared first on Security Boulevard.

ChatGPT one year later: Challenges and learnings

Last Thursday marked the one-year anniversary of the launch of ChatGPT. Immediately, the first publicly-available generative artificial intelligence (GenAI) tool sparked immense interest in the rise of artificial intelligence (AI) and machine ...

Debunking MFA Myths: How to Stay Secure

When discussing authentication security, Multi-Factor Authentication (MFA) has been widely touted as a linchpin for securing digital assets. However, as recent trends and reports suggest, MFA, while significant, is not the panacea it’s often ...

Rambus launches Quantum Safe Engine for data center and government hardware security

Rambus has unveiled the availability of a Quantum Safe Engine (QSE) for integration into hardware security elements in ASICs, SoCs and FPGAs. Quantum computers will enable adversaries to break current asymmetric encryption, placing important data ...

Global Integrity QTel protects voice, messaging, and video conversations

Global Integrity announced the newest version of the company’s secure communications solution, QTel, which offers advanced features and stronger encryption. Formerly Qphone, the new QTel provides a unique approach that ensures security and ...

AI and Quantum Computing Threaten Encryption and Data Security

The combination of AI and quantum computing in the wrong hands are enough of a security concern to give pause to even the most experienced technologists. The post AI and Quantum Computing Threaten Encryption and Data Security appeared first on ...

10 tips for building an enterprise threat modeling program

The post 10 tips for building an enterprise threat modeling program appeared first on Security Boulevard.

Top CISO Communities to Join in 2024

CISO communities are available around the world for cybersecurity leaders to collaborate with other professionals.  The post Top CISO Communities to Join in 2024 appeared first on Scytale. The post Top CISO Communities to Join in 2024 appeared ...

The Internet Enabled Mass Surveillance. AI Will Enable Mass Spying.

Spying and surveillance are different but related things. If I hired a private detective to spy on you, that detective could hide a bug in your home or car, tap your phone, and listen to what you said. At the end, I would get a report of all the ...

Resecurity and ICS Technologies join forces to improve cybersecurity in Iraq

Resecurity and ICS Technologies IRAQ, a well-established ICT System Integration Company with HQ in Baghdad, Iraq, have joined forces to fortify cybersecurity, fraud prevention and risk intelligence measures nationwide. This strategic partnership ...

“Do Not Push To Production” And Other Insecure Code, Demonstrated By An Ethical Hacker

Enjoy highlights from GitGuardian's ethical hacking webinar with a friend from Snyk. The post “Do Not Push To Production” And Other Insecure Code, Demonstrated By An Ethical Hacker appeared first on Security Boulevard.

RSA Keys Security: Insights from SSH Server Signing Errors

In the realm of secure communication protocols, RSA keys play a pivotal role in safeguarding sensitive information. Recently, a group of researchers from prominent universities in California and Massachusetts uncovered a vulnerability in the SSH ...

Leveraging Automation for Risk Compliance in IT

Organizations often encounter the challenge of managing complex technology ecosystems while ensuring data security, compliance, and risk management. One crucial aspect of this challenge is risk compliance in IT environments, specifically Linux ...

Konni Malware Alert: Uncovering The Russian-Language Threat

In the ever-evolving landscape of cybersecurity, a recent discovery sheds light on a new phishing attack being dubbed the Konni malware. This cyber assault employs a Russian-language Microsoft Word document malware delivery as its weapon of ...

Remote Desktop Protocol Hijacking – Security Spotlight

The “Security Spotlight” blog series provides insight into emerging cyberthreats and shares tips for how you can leverage LogRhythm’s security tools, services, and out-of-the-box content to defend against attacks. In this Security ...

SessionProbe: Open-source multi-threaded pentesting tool

SessionProbe is a multi-threaded pentesting tool designed to evaluate user privileges in web applications. It takes a user’s session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. It ...

Bolstering API Security: Introducing Wallarm’s API Attack Surface Management (AASM)

In the fast-paced digital world, think of Application Programming Interfaces (APIs) as the threads that stitch together the fabric of our tech ecosystems. They're often overlooked, quietly ensuring that your apps communicate seamlessly and keep ...