Application Security News and Articles


The Rise of Business Email Compromise and How To Protect Your Organization

Business Email Compromise (BEC) is rapidly emerging as one of the most financially damaging online crimes. According to the 2022 FBI Internet Crime Report, BEC scams have led to staggering losses, […] The post The Rise of Business Email ...

P2PInfect Botnet Is Now Targeting MIPS-Based IoT Devices

The operator behind the growing P2PInfect botnet is turning their focus to Internet of Things (IoT) and routers running the MIPS chip architecture, expanding their list of targets and offering more evidence that the malware is an experienced ...

DEF CON 31 – Josep Rodriguez’ ‘Contactless Overflow Code Execution In Payment Terminals & ATMs’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

Building a Collaborative Approach to Secure the Connected World

The expanding IoT landscape demands a collaborative approach to PKI, ensuring seamless security across diverse domains. The post Building a Collaborative Approach to Secure the Connected World appeared first on Security Boulevard.

STIX & TAXII Threat Intelligence: A Quick Guide

Among the various tools and frameworks available for cyber threat intelligence (CTI), STIX and TAXII stand out due to their robustness and interoperability. We present a quick guide to STIX (Structured Threat Information eXpression) and TAXII ...

ArmorCode raises $40 million to help companies ship secure software

ArmorCode announced it closed a pre-emptive $40 million Series B round to advance its mission of helping companies ship secure software fast and at scale. Premier venture firm HighlandX led the round, joined by NGP Capital, along with ...

RDRS: ICANN’s new service for easier access to nonpublic domain data

The Internet Corporation for Assigned Names and Numbers (ICANN) has launched the Registration Data Request Service (RDRS). The RDRS is a new service that introduces a more consistent and standardized format to handle requests for access to ...

Limiting Remote Access Exposure in Hybrid Work Environments

With the rise in remote and distributed work, companies find it increasingly difficult to manage their attack surface at the speed and scale necessary to prevent cyberattacks. The post Limiting Remote Access Exposure in Hybrid Work Environments ...

Votiro Named Recipient of Food Logistics, Supply & Demand Chain Executive 2023 Top Tech Startup Award

We are excited to announce that Food Logistics, Supply & Demand Chain Executive has selected Votiro as one of this year’s Top Tech Startups, which highlights top software and technology startups in the supply chain and logistics space. ...

CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities

Iran-affiliated attackers CyberAv3ngers continue to exploit vulnerable Unitronics programmable logic controllers (PLCs), US and Israeli authorities have said in a joint cybersecurity advisory. CyberAv3ngers targeting Unitronics PLCs CISA has ...

AI and Trust

I trusted a lot today. I trusted my phone to wake me on time. I trusted Uber to arrange a taxi for me, and the driver to get me to the airport safely. I trusted thousands of other drivers on the road not to ram my car on the way. At the airport, ...

Booking.com customers targeted in hotel booking scam

Scammers are hijacking hotels’ Booking.com accounts and using them as part of a hotel booking scam aimed at tricking guests into sharing their payment card information. “Customers of multiple properties received email or in-app ...

The Top 7 Cyber Risk Management Trends for 2024 | Kovrr blog

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post The Top 7 Cyber Risk Management Trends for 2024 | Kovrr blog appeared first on Security Boulevard.

Imperva & Thales: Pioneering a New Era in Cybersecurity

Imperva has been a beacon of excellence for over twenty years in the digital protection landscape, where innovation is paramount. Renowned for its groundbreaking products, Imperva has not just secured applications, APIs, and data for the ...

Put guardrails around AI use to protect your org, but be open to changes

Artificial intelligence (AI) is a topic that’s currently on everyone’s minds. While in some industries there is concern it could replace workers, other industries have embraced it as a game-changer for streamlining processes, automating ...

Application Security Trends & Challenges with Tanya Janca

In this episode, noteworthy guest Tanya Janca returns to discuss her recent ventures and her vision for the future of Application Security. She reflects on the significant changes she has observed since her career at Microsoft, before discussing ...

The AI readiness race and where global companies stand

According to Cisco, only 14% of organizations worldwide are ready to implement and utilize AI technologies. The report found that 61% of respondents indicated they have a maximum of one year to deploy their AI strategy before there’s a negative ...

Flying Blind: Is your Vulnerability Management program working?

Vulnerability management is a non-trivial problem for any organization that is trying to keep their environment safe.  There can be myriad tools in use, multiple processes, regulations, and numerous stakeholders all putting demands on the ...

2024 cybersecurity outlook: The rise of AI voice chatbots and prompt engineering innovations

In their 2024 cybersecurity outlook, WatchGuard researchers forecast headline-stealing hacks involving LLMs, AI-based voice chatbots, modern VR/MR headsets, and more in the coming year. Companies and individuals are experimenting with LLMs to ...

Maximizing cybersecurity on a budget

A cybersecurity budget is an allocation of resources, both financial and otherwise, dedicated to protecting an organization’s digital assets from cyber threats. This includes funds for security software, hardware, training, and personnel. A ...