Application Security News and Articles


CyberTalk Series: MSP and MSSP SaaS Security and Management Challenges in 2023 and Goals for 2024 with George Smith

The MSP/MSSP space and services that are provided by managed services providers is changing rapidly. With 46% of businesses not having .. The post CyberTalk Series: MSP and MSSP SaaS Security and Management Challenges in 2023 and Goals for 2024 ...

Guardians of the Cloud: Navigating the Advanced Frontiers of Cybersecurity

Once upon a time, in the realm of digital technology, there lived a powerful guardian named Firewall. Tasked with protecting the kingdom of Businessburg from relentless cyber bad actors, Firewall stood tall and strong, safeguarding the ...

Randall Munroe’s XKCD ‘Thanksgiving Arguments’

Permalink The post Randall Munroe’s XKCD ‘Thanksgiving Arguments’ appeared first on Security Boulevard.

Meta Sued for Ignoring its Underage Kids Problem (Because Money)

Don’t be square: Newly-unsealed COPPA suit says Zuck’s mob knows full well there are loads of users under the age of 13, but did nothing. The post Meta Sued for Ignoring its Underage Kids Problem (Because Money) appeared first on Security ...

Kasada Achieves AWS Retail Competency and is Now Available in Marketplace

Makes it easy to buy, integrate, and realize immediate value when using Kasada and AWS edge security services together. The post Kasada Achieves AWS Retail Competency and is Now Available in Marketplace appeared first on Security Boulevard.

Understanding Endpoint Detection and Response (EDR)

In the ever-evolving landscape of cyber threats, organizations are constantly searching for advanced solutions to protect their digital assets. Among these protective mechanisms, Endpoint Detection and Response (EDR) stands out. Let’s delve ...

UK, South Korea Warn of North Korea Supply-Chain Attacks

The cybersecurity agencies in the UK and South Korea are warning of the growing threat of North Korea-linked threat groups using zero-day and third-party exploits to launch software supply-chain attacks. The hackers are targeting products that ...

Fortanix Key Insight discovers and remediates data security risks in hybrid multicloud environments

Fortanix announced Key Insight, a new capability in the Fortanix Data Security Manager TM (DSM) platform designed to help enterprises discover, assess, and remediate risk and compliance gaps across hybrid multicloud environments. Data breaches ...

DEF CON 31 – Carlos Polop’s, Yago Gutierrez’ ‘Exploring Linux Memory Manipulation for Stealth and Evasion’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass

Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass. The post Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass appeared first on ...

Top 5 Questions from the World’s Largest CMMC Event

Over 2,300 registrants participated in our 2023 CMMC Summit. Leading experts, including Matt Travis (Cyber AB, CEO), Paul Escobedo (CISO, Raytheon), and Dr. Ron Ross (Author, NIST), answered audience questions about all aspects of CMMC ...

Guide to the IIoT Security [Industrial Internet of Things]

Often called the ‘industrial internet’ or ‘industry 4.0,’ specialists anticipate that IIoT security will play a significant role in the fourth industrial revolution. In the face of narrowing profit margins, escalating inflation, and ...

Veracode’s latest innovations help developers enhance cloud-native security

Veracode announced product innovations to enhance the developer experience. The new features integrate security into the software development lifecycle (SDLC) and drive adoption of application security techniques in the environments where ...

Henry Schein Again Restoring Systems After Ransomware Group Causes More Disruption

Healthcare solutions giant Henry Schein is once again restoring systems after ransomware group claims it re-encrypted files. The post Henry Schein Again Restoring Systems After Ransomware Group Causes More Disruption appeared first on SecurityWeek.

Released: AI security guidelines backed by 18 countries

The UK National Cyber Security Centre (NCSC) has published new guidelines that can help developers and providers of AI-powered systems “build AI systems that function as intended, are available when needed, and work without revealing ...

Security is an Economically Resilient Market: Strategies for Uncertain Times

Even in uncertain economic conditions, the need for safety and security create opportunities for security providers to grow. The post Security is an Economically Resilient Market: Strategies for Uncertain Times appeared first on Security Boulevard.

Trend Companion reduces time spent on manual risk assessments and threat investigations

Trend Micro launched its new generative AI tool, Trend Companion, designed to empower security analysts by driving streamlined workflows and enhanced productivity. “Stretched security operations teams are struggling with the sheer volume ...

US, UK Cybersecurity Agencies Publish AI Development Guidance

New guidance from US and UK cybersecurity agencies provides recommendations for secure AI system development. The post US, UK Cybersecurity Agencies Publish AI Development Guidance appeared first on SecurityWeek.

Small Business Cybersecurity Hampered by Fear of Change, Judgement

Fear of making mistakes or being judged by colleagues keep SMBs from changing their cybersecurity behaviors, according to a Kaspersky survey. The post Small Business Cybersecurity Hampered by Fear of Change, Judgement appeared first on Security ...

Hacktivism: What’s in a Name… It May be More Than You Expect

Hacktivism is evolving. It is important for both the law and cyber defenders to understand the current and potential activity of hacktivism to better understand how it should be treated. The post Hacktivism: What’s in a Name… It May be More ...