Application Security News and Articles


Are the Fears about the EU Cyber Resilience Act Justified?

Discover the inner workings of the recently implemented Cyber Resilience Act (CRA) in the EU and explore why this framework has raised concerns about jeopardizing the open-source ecosystem. Join us in our latest blog post to delve into this ...

VirusTotal: Generative AI is Great at Detecting, Identifying Malware

Generative AI engines similar to OpenAI’s ChatGPT and Google’s Bard will become indispensable tools for enterprises and cybersecurity operations in detecting and analyzing malicious code in a real-world environment, according to researchers ...

BlockCerts: Building Blockchain Solutions that Work

When dealing with a new technology, you have a choice between using a large company that does what you need as one of the many capabilities that company has or dealing with a smaller company that expressly focuses on what … BlockCerts: ...

Stressed Employees and Insider Threats Put Data in Danger

The majority of data breaches involved the human element, a catchall term for company insiders who compromise company and customer data. The post Stressed Employees and Insider Threats Put Data in Danger appeared first on Security Boulevard.

Cybersecurity Insights with Contrast SVP of Cyber Strategy Tom Kellermann | 12/1

  The post Cybersecurity Insights with Contrast SVP of Cyber Strategy Tom Kellermann | 12/1 appeared first on Security Boulevard.

Insight – Holiday Threat Awareness 2023

Amidst the hustle and bustle of holiday preparations and last-minute shopping, cybercriminals often take advantage of the increased online activity and spending complacency of individuals and businesses... The post Insight – Holiday Threat ...

Cable Transaction Assurance enhances the efficacy of front-line financial crime controls

Cable launched Transaction Assurance, pioneering a new wave of financial crime compliance and transaction testing. “In recent years, we’ve witnessed a surge in compliance lapses, highlighted by billions in fines levied against major ...

Security Pros See Budget Bump, Headcount Rise in 2023

Increased budgets and team sizes within security departments are giving IT pros a boost despite the prevailing economic challenges in 2023. The post Security Pros See Budget Bump, Headcount Rise in 2023 appeared first on Security Boulevard.

Voltron Data Theseus helps organizations solve data processing challenges

Voltron Data introduced Theseus, a distributed execution engine built to solve today’s data processing challenges at a scale beyond the capabilities of CPU-based analytics systems like Apache Spark. Theseus is available to enterprises and ...

Qlik Sense flaws exploited in Cactus ransomware campaign

Attackers are exploiting three critical vulnerabilities in internet-facing Qlik Sense instances to deliver Cactus ransomware to target organizations, Arctic Wolf researchers have warned. The exploited vulnerabilities Qlik Sense is a business ...

AI Decides to Engage in Insider Trading

A stock-trading AI (a simulated experiment) engaged in insider trading, even though it “knew” it was wrong. The agent is put under pressure in three ways. First, it receives a email from its “manager” that the company is not doing well ...

Hitachi Vantara Pentaho+ allows organizations to oversee data from inception to deployment

Hitachi Vantara announced Pentaho+, an integrated platform from the Pentaho software business designed to help organizations connect, enrich, and transform operations with refined, reliable data necessary for AI and generative AI accuracy. ...

Intelligent Credentialling: Single Sign-On for SafePaaS

Intelligent Credentialling: Single Sign-On for SafePaaSBusinesses struggle to balance convenience and security. Enter Single Sign-On for SafePaaS - a security solution that streamlines access and fortifies your organization's defense against ...

Critical Zyxel NAS vulnerabilities patched, update quickly!

Zyxel has patched six vulnerabilities affecting its network attached storage (NAS) devices, including several (OS) command injection flaws that can be easily exploited by unauthenticated attackers. The vulnerabilities in Zyxel NAS devices One of ...

Insider Risk Digest: Week 47-48

This Article Insider Risk Digest: Week 47-48 was first published on Signpost Six. | https://www.signpostsix.com/ Introduction Every two weeks, we bring you a round-up of cases and stories that caught our attention in the realm of Insider ...

Navigating Rogue Waves; Balancing Privacy and Security

This Article Navigating Rogue Waves; Balancing Privacy and Security was first published on Signpost Six. | https://www.signpostsix.com/ Introduction In 2013, Edward Snowden leaked over 200,000 classified National Security Agency documents ...

Apple patches two zero-days used to target iOS users (CVE-2023-42916 CVE-2023-42917)

With the latest round of security updates, Apple has fixed two zero-day WebKit vulnerabilities (CVE-2023-42916, CVE-2023-42917) that “may have been exploited against versions of iOS before iOS 16.7.1.” About the vulnerabilities ...

Weekly Blog Wrap-Up (November 27 – November 30, 2023)

Welcome to the TuxCare Weekly Blog Wrap-Up – your go-to resource for the latest insights on cybersecurity strategy, Linux security, and how to simplify the way your organization protects its data and customers. At TuxCare, we understand the ...

How can Cloud Security Prevent Exposure of Credentials via File Sharing App?

Do you know 76% of organizations are concerned about their cloud security? The seamless exchange and management of files stand as a key for businesses and individuals alike. Nevertheless, new information has highlighted serious vulnerabilities in ...

Zimbra Zero-Day Exploit Unveiled

Cyber threats in business email systems have become extremely common in this digital world. Recently, a critical zero-day vulnerability in the widely used Zimbra Collaboration email software has been exploited by multiple threat actors, posing ...