Application Security News and Articles


Mastering Your Risk Assessment Report: Steps for Effective Analysis

In today’s rapidly evolving digital landscape, organizations must be vigilant in managing and mitigating cyber risks. One powerful weapon in the cybersecurity arsenal is a comprehensive risk assessment report – a crucial tool for identifying ...

Navigating Uncertainty: Why Are Risk Assessments Important for Your Business?

You understand why risk assessments are essential in ensuring success and longevity in the complex business world. A comprehensive understanding of potential hazards and effective mitigation strategies is crucial for safeguarding your ...

The Essential Cyber Security Overview: Safeguarding Your Digital Life

The digital age has brought unparalleled connectivity and convenience to our lives but has also given rise to new threats and vulnerabilities. As we become increasingly reliant on technology, the importance of a cyber security overview cannot be ...

Leveraging Existing EDR Agents for Cybersecurity ROI

Organizations are increasing cybersecurity ROI by maximizing the use of their existing endpoint detection and response (EDR) agents No one is giving money away, budgets are getting increasingly tighter, and security teams have to continuously ...

Understanding the Security of Mobile Apps in Africa

CyLab-Africa researchers partner with mobile security provider for summer collaboration experience Researchers from CyLab-Africa and the Upanzi Network recently partnered with the mobile security provider Approov to explore the security of ...

Intel Reptar Flaw Patch For CPU Vulnerability Released

Intel recently released multiple fixes for a high-severity vulnerability dubbed Reptar. The CVE-2023-23583 has a CVSS score of 8.8 and, when exploited, has the potential for privilege escalation, information disclosure, and a denial of service ...

Implementing Network Segmentation: Strategies for Better Security in Enterprise Networks

Network Segmentation Strategy: A Key to Better Security and Control Implementing a robust network segmentation strategy is vital in today’s dynamic cybersecurity landscape, offering enhanced protection for businesses. This strategy involves ...

5 resolutions to prepare for SEC’s new cyber disclosure rules

2023 has been marked as a year of global conflict and unrest, all of which will impact the cyber threat landscape for years to come. However, one of the most significant cyber security developments for 2024 isn’t driven by attackers. It’s ...

Strategies for cultivating a supportive culture in zero-trust adoption

In this Help Net Security interview, Wolfgang Goerlich, Advisory CISO at Cisco, discusses the benefits of implementing a mature zero-trust model for both security and business outcomes, revealing a decrease in reported security incidents and ...

Enterprises prepare for the inevitable cyber attack

Recent IDC research shows that in many cases, senior executives/line-of-business leaders are minimally engaged in their company’s cyber preparedness initiatives. In fact, 52% of senior leaders have no involvement in their company’s cyber ...

Vigil: Open-source LLM security scanner

Vigil is an open-source security scanner that detects prompt injections, jailbreaks, and other potential threats to Large Language Models (LLMs). Prompt injection arises when an attacker successfully influences an LLM using specially designed ...

Defend Against Cyber Threats: Understanding Each Ransomware Type

In the digital era, the threat of Ransomware looms more significant than ever. With an ever-growing number of ransomware types and tactics, organizations and individuals must stay vigilant to protect their valuable data. Are you prepared to ...

Mastering NIST Penetration Testing: Your Essential Guide to Robust Cybersecurity

Securing your organization’s information systems is a top priority in the ever-evolving digital landscape. Organizations face an ongoing battle against cyber threats; penetration testing is a powerful weapon to avoid these risks. The National ...

Defining Cyber Security Goals and Objectives: A Guide to Protecting Your Digital Empire

In an era where digital assets have become an integral part of business operations, the need for a comprehensive cybersecurity plan has never been more critical. The digital realm is fraught with risks, and organizations must prioritize achieving ...

Unpacking the Financial and Security Implications of Vendor Lock-In

The concept of ‘platformization’ – where leading vendors like Cisco or Palo Alto offer extensive, integrated security platforms – is becoming increasingly common. However, this trend towards platformization also brings to the fore the ...

KubeCon 2023: Bridging the AppSec Tools Gap

Alan Shimel: Hey everyone, it’s Alan Shimel, Tech Strong TV, and we’re back here live at KubeCon in the windy city of Chicago. It wasn’t that windy out. It was actually pretty warm this morning. I thought it was going to be ...

Podcast Episode 10: New AI Safety Standards, Cyber Skills Gap, Experience VS. Certification

Join us for another riveting episode of Unmasked to close out November. Get ready to dive into recent cybersecurity events and hot topics. We dissect AI’s use across multiple industries, examining how it’s trained for specific tasks and ...

DEF CON 31 XR Village – Kolton Heaps’ ‘Push All the Buttons Digital Twinning With Idaho National Labs’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

Five Takeaways from Black Friday & Cyber Monday Cyber Attacks

The online retail industry is one of the prime targets for cybercrime, as detailed in our annual analysis of the cybersecurity threats targeting eCommerce websites and applications.  As the 2023 holiday shopping season continues, Imperva Threat ...

NIST CSF 2.0: Changes and Implications

In August 2023, the National Institute of Standards and Technology (NIST) released a draft version of NIST Cybersecurity Framework (CSF) 2.0. This impending update to the popular cybersecurity guidance brings some significant changes. The ...