Application Security News and Articles


DEF CON 31 – Daniel Avinoam’s ‘Staying Undetected Using The Windows Container Isolation Framework’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

Employee Stress Puts Data in Danger

The Harvard Business Review conducted a survey of more than 330 remote employees from a wide range of industries to self-report on both their daily stress levels and their adherence to cybersecurity policies over the duration of two weeks.  ...

2023’s Dark Horse Cyber Story: Critical Infrastructure Attacks

There are several cybersecurity trends that truly deserve top attention when we look back at 2023 — and they will get it. Meanwhile, cyber attacks against critical infrastructure quietly grow, despite a lack of major attention.    The post ...

Kubernetes 1.29: The Security Perspective

Kubernetes 1.29 will be the last release from the Kubernetes team for 2023. The new release has 49 The post Kubernetes 1.29: The Security Perspective appeared first on ARMO. The post Kubernetes 1.29: The Security Perspective appeared first on ...

Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widens

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Vulnerability disclosure: Legal risks and ethical considerations for researchers In this Help Net Security interview, Eddie Zhang, Principal ...

初次見面:SonarQube-兼顧程式碼品質和弱掃工具

在專案中,當我們已經完成了作品的POC(Proof of Concept)或者已經到UAT(User Acceptance ...

DEF CON 31 – War Stories – Taiiwo’s, Artorias’, Puck’s, TheClockworkBird’s ‘Cracking Cicada 3301’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

China continues Pig-Butchering Crack-down

One of my techniques for keeping current on Cybercrime trends is having an "interesting" collection of international news ticklers. This story came to me via X:CyberScamMonitor via a QQ account called "onCambodia." @CyberScamMonitor is a ...

How Kasada Counters Toll Fraud and Fake Account Creation for Enterprises

Amidst surging fake account creation and messaging charges from SMS toll fraud, two industry giants chose Kasada to protect their customers and profit margins. The post How Kasada Counters Toll Fraud and Fake Account Creation for Enterprises ...

How to Build a Phishing Playbook Part 1: Preparation

Automating response to phishing attacks remains one of the core use-cases of SOAR platforms. In 2022, the Anti-Phishing Working Group (APWG) logged ~4.7 million phishing attacks. Since 2019, the number of phishing attacks has increased by more ...

Cooking Intelligent Detections from Threat Intelligence (Part 6)

This blog series was written jointly with Amine Besson, Principal Cyber Engineer, Behemoth CyberDefence and one more anonymous collaborator. In this blog (#6 in the series), we will covers some DOs and DON’Ts regarding TI/CTI and DE interaction ...

DEF CON 31 – Renderman’s, Tom Dang’’s ‘War Stories – The Risks Of Pointing Out The Emperor Is Buck Naked’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

The Qlik Cyber Attack: Why SSPM Is a Must Have for CISOs

Learn more about the cyberattack against internet-facing Qlik Sense and see how AppOmni secured their own environment from Qlik’s potential impact with SSPM. The post The Qlik Cyber Attack: Why SSPM Is a Must Have for CISOs appeared first on ...

8 Essential Security Awareness Training Topics

As a security leader, you recognize the extraordinary potential within your workforce as the first line of defense against threats — and the importance of providing practical security awareness training.  In this blog, you’ll discover ...

Accelerating Cloud-Native Data Security Deployments at Scale with Imperva’s eDSF Kit

Today’s evolving digital landscape and the rapid expansion of cloud technologies have necessitated a shift in the approach of deploying and managing data security across multiple platforms. Traditional methods of manual deployment of data ...

Randall Munroe’s XKCD ‘X Value’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD! Permalink The post Randall Munroe’s XKCD ‘X Value’ appeared first on Security Boulevard.

Discovering MLflow Framework Zero-day Vulnerability | Machine Language Model Security | Contrast Security

Most Machine Language (ML) tools — including the development frameworks used for managing ML life cycles — are relatively new, which means they could well  have security vulnerabilities.  The post Discovering MLflow Framework Zero-day ...

TikTok Ban Banned — Montana Loses in US Court

For you plague, still: States can’t just ban apps, says federal judge. The post TikTok Ban Banned — Montana Loses in US Court appeared first on Security Boulevard.

Apache ActiveMQ RCE Leads to Domain Compromise

Pervasive CISA Known Exploited Vulnerability Enables Initial Access The post Apache ActiveMQ RCE Leads to Domain Compromise appeared first on Horizon3.ai. The post Apache ActiveMQ RCE Leads to Domain Compromise appeared first on Security Boulevard.

DEF CON 31 – Will Kay’s’ Packet Hacking Village – Death By 1000 Likes’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...