Application Security News and Articles


Ardent Hospitals Diverting Patients Following Ransomware Attack

Ransomware attack forces Ardent hospitals to shut down systems, impacting clinical and financial operations. The post Ardent Hospitals Diverting Patients Following Ransomware Attack appeared first on SecurityWeek.

SMBs face surge in “malware free” attacks

“Malware free” attacks, attackers’ increased reliance on legitimate tools and scripting frameworks, and BEC scams were the most prominent threats small and medium businesses (SMBs) faced in Q3 2023, says the inaugural SMB Threat ...

Ddostf DDoS Botnet Malware Targets MySQL Servers

Beware of a new threat in the cyber realm: the ‘Ddostf’ malware botnet is on the prowl, specifically targeting MySQL servers. This malicious botnet enslaves MySQL servers for a sinister purpose – running a DDoS-as-a-Service platform that ...

Understanding the Levels of CMMC: Enhancing Cybersecurity Maturity

Here’s everything you need to know about CMMC levels, and how businesses can ensure compliance with their appropriate level. The post Understanding the Levels of CMMC: Enhancing Cybersecurity Maturity appeared first on Scytale. The post ...

Safeguarding Against Security Misconfigurations with the Power of Machine Learning

Security misconfiguration is a critical vulnerability that can lead to unauthorized access, data breaches, service disruptions, and reputation damage. In today’s digital landscape, where cyber threats are constantly evolving, it is essential to ...

Another Look at Accountability in Cybersecurity

Cybersecurity incidents are more than availability problems Malicious actors are using the legal process to their advantage Personal liability for cybersecurity mishandling is becoming more common Cybersecurity incidents, once dismissed as minor ...

Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets

AWS announced Amazon One Enterprise, a palm-based identity service for comprehensive and easy-to-use authentication that improves organizational security and helps prevent costly security breaches. The new service enables organizations to provide ...

Disable Windows Event Logging – Security Spotlight

The “Security Spotlight” blog series provides insight into emerging cyberthreats and shares tips for how you can leverage LogRhythm’s security tools, services, and out-of-the-box content to defend against attacks. In this Security ...

IPStrom Takedown Russian Mastermind Pleads Guilty

On Tuesday, November 14th, 2023, the United States (US) government initiated the IPStrom takedown, Russian mastermind pled guilty to being the brains behind the operation. The IPStrom malware network was taken down as the botnet had infected ...

Stop panic buying your security products and start prioritizing

As 2024 is rounding the corner, many companies are making a fresh start with a new cybersecurity budget. But with the growing number of cyberattacks and their increasingly complex nature, even those companies whose cybersecurity budgets have gone ...

How passkeys are reshaping user security and convenience

In this Help Net Security interview, Anna Pobletts, Head of Passwordless at 1Password, talks about passkey adoption and its acceleration in 2024. This trend is particularly notable among highly-regulated services like fintech and banking, where ...

Guarding the gateway: Securing dispersed networks

The network is at an inflection point, and organizations’ networks have become more dispersed amongst the cloud and on-prem, prompting a greater need for visibility today than ever. As the nature of the network shifts, teams face challenges ...

Product showcase: New ESET Home Security

ESET is thrilled to announce our new cutting-edge consumer solutions. Our consumer offering is more than just security – it is a comprehensive portfolio designed to keep our customers safe in today’s digital landscape. We are dedicated to ...

Generative AI security: Preventing Microsoft Copilot data exposure

Microsoft Copilot has been called one of the most powerful productivity tools on the planet. Copilot is an AI assistant that lives inside each of your Microsoft 365 apps — Word, Excel, PowerPoint, Teams, Outlook, and so on. Microsoft’s ...

Report: The state of authentication security 2023

This survey set out to explore these challenges, to identify common practices, and to provide insight into how organizations can bolster their defenses. Key findings from the survey include: Current authentication practices Authentication-related ...

Rethinking shift left: How a lack of context creates unnecessary friction between AppSec and Developers

Shift Left… it’s a term used almost ubiquitously across application security by both security practitioners implementing programs, regardless of scale, as well as just about every vendor selling an application security solution. The idea that ...

Beyond Goals: Developing Systems for Success in Tech

How innovative systems and strategic planning can propel tech startups beyond traditional goals, fostering growth and scalability The post Beyond Goals: Developing Systems for Success in Tech appeared first on Security Boulevard.

DEF CON 31 – Noam Moshe’s, Sharon Brizino’s ‘Exploiting OPC UA – Practical Attacks Against OPC UA Architectures’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...