Application Security News and Articles


A Comprehensive Guide to Software Penetration Testing

Why do companies spend millions of dollars on security measures only to have their systems compromised by hackers? The answer lies in the ever-evolving landscape of cyber threats and the need to improve security practices continuously. One of the ...

A Comprehensive Guide to Writing a Cyber Security Audit Report

In today’s increasingly digital world, cyber security has become a paramount concern for organisations of all sizes. A cyber security audit report can serve as a vital tool in safeguarding sensitive data, maintaining compliance with regulatory ...

Comprehensive Cyber Security Audit Checklist for 2024

In an era of ever-evolving cyber threats, ensuring the security of your organisation’s data and systems is of utmost importance. A comprehensive cyber security audit checklist can play a pivotal role in achieving this goal. But what makes an ...

DEF CON 31 – Ricky Lawshae’s ‘Fantastic Ethertypes and Where to Find Them’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

How Popular Are Generative AI Apps?

In the past year, ChatGPT has become one of the fastest growing online services ever. But how popular are the generative AI apps? A recent study reveals the data behind the growth.   The post How Popular Are Generative AI Apps? appeared first on ...

Week in review: LockBit exploits Citrix Bleed, Apache ActiveMQ bug exploited for cryptojacking

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: PolarDNS: Open-source DNS server tailored for security evaluations PolarDNS is a specialized authoritative DNS server that allows the operator ...

DEF CON 31 – Kemba Walden’s ‘Fireside Chat with the National Cyber Director’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

What is a System Audit Report (SAR)? – A Brief Guide

In a time of swift technological progress and more global connectivity, protecting sensitive financial data has become critical for businesses. System Audit Report commonly known as SAR, acts as a vital strategy that secures against the complex ...

Cybersecurity Insurance is Missing the Risk

  First published by HelpNetSecurity — Matthew Rosenquist Cybersecurity insurance is a rapidly growing market, swelling from approximately $13B in 2022 to an estimated $84B in 2030 (26% CAGR), but insurers are struggling with quantifying ...

Webinar: Maximizing SOC Efficiency With Open and Agnostic Security Solutions

Don’t miss our upcoming panel webinar, “Open and Agnostic Security Solutions to Defend Against Modern Threats,” happening on November 29, 2023, at 10 AM PST/1 PM EST. Our panelists, Tony UV (CEO of VerSprite), David Barton (CTO of High Wire ...

Shift-Left SAST: Lab vulnerabilities

Shift LeftContinue reading on Medium »

Cultivating Digital Inclusion: Empowering Aging Adults Through Technology

Digital literacy isn’t just for pre-teens and college students. Older adults need to be brought into the fold to cultivate digital inclusion and empower folks as they enter their golden years. A strong grasp of high-tech devices can help aging ...

Different types of penetration testing

Explore various penetration testing types, including black-box, white-box, and grey-box testing, and discover their unique attack vectors. The post Different types of penetration testing appeared first on Security Boulevard.

The Machine Learning Cybersecurity Revolution

Balancing the promise and pitfalls of machine learning cybersecurity The integration of machine learning (ML) has opened up new frontiers for defending against complex and evolving cyber threats. However, machine learning cybersecurity ...

Cybersecurity Insights with Contrast CISO David Lindner | 11/24

Insight #1 It's the holiday season, and malicious actors are primed to take advantage of all the amazing deals you may be trying to purchase over the next few weeks. Listen to your intuition: If a deal is too good to be true, you are most likely ...

How to implement ISO 27001 Annex A controls by using AI

If you’re implementing an ISMS, you’re probably wondering how to implement ISO 27001 controls from Annex A and how. There are 93 controls listed in this annex of ISO 27001, and most people get confused over which documents to use, which ...

The drawbacks of using video training for your security awareness program

The post The drawbacks of using video training for your security awareness program appeared first on Click Armor. The post The drawbacks of using video training for your security awareness program appeared first on Security Boulevard.

North Korean Software Supply Chain Attack Hits North America, Asia 

North Korean hackers breached a Taiwanese company and used its systems to deliver malware to the US, Canada, Japan and Taiwan in a supply chain attack. The post North Korean Software Supply Chain Attack Hits North America, Asia  appeared first ...

The Significance of Honeypots and the Rise of Honeytokens

Discover the roles and risks of honeypots and honeytokens in cybersecurity with this article. Understand how they work, the benefits they bring to your security strategy, and the precautions needed to avoid potential pitfalls. The post The ...

What is Recovery Time Objective (RTO)?

Grasping the Technique: The Often Misconstrued 'RTO' Unravelled in the Sphere of Business Resiliency At the heart of organisational durability and a tactical roadmap directing towards reestablishing regular operations post-disruptions, lies the ...