Application Security News and Articles


The Role of Microsegmentation in Zero Trust Security

As one of the keys to implementing least-privilege access, microsegmentation is an essential element in the Zero Trust toolbox. The post The Role of Microsegmentation in Zero Trust Security appeared first on Ericom Software. The post The Role of ...

How to Calculate the Cost of a Data Breach

Breaches of corporate IT networks now happen all the time, every day, to just about every type of organization under the sun. They are a top worry for any compliance officer, and figuring out better ways to prevent them or recover from them is ...

The AI Paradox: Balancing Generative AI Adoption With Cybersecurity Risks

As AI models become more sophisticated, the potential for misuse or unintended consequences grows, emphasizing the need for robust oversight and a proactive approach to governance. The post The AI Paradox: Balancing Generative AI Adoption With ...

185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone 

Car parts giant AutoZone says nearly 185,000 individuals were impacted by a data breach caused by the MOVEit hack. The post 185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone  appeared first on SecurityWeek.

How LockBit used Citrix Bleed to breach Boeing and other targets

CVE-2023-4966, aka “Citrix Bleed”, has been exploited by LockBit 3.0 affiliates to breach Boeing’s parts and distribution business, and “other trusted third parties have observed similar activity impacting their ...

Broadcom completes $69 billion acquisition of VMware in cash and stock

Broadcom has announced it has cleared all regulatory hurdles and plans to complete its $69 billion acquisition of VMware. The company announced it planned to move ahead with the deal after China joined the list of countries that had given a ...

Chiselled Ubuntu closes prevailing container security gaps

Canonical announced chiselled Ubuntu containers which come with Canonical’s security maintenance and support commitment. Chiselled Ubuntu containers are ultra-small OCI images that deliver only the application and its runtime dependencies, and ...

Windows Hello Fingerprint Authentication Bypassed on Popular Laptops

Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them. The post Windows Hello Fingerprint Authentication Bypassed on Popular Laptops appeared first on SecurityWeek.

Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board

San Francisco-based OpenAI has reached an agreement in principle for Sam Altman to return to OpenAI as CEO with a new initial board. The post Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board appeared first on ...

10 Holiday Cybersecurity Tips for CISOs

Organizations experience 30% more ransomware attacks during the holiday season, with a 70% average increase in attempted ransomware attacks in November and December compared with January and February. Many factors converge to make defending ...

Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products

Microsoft invites researchers to new bug bounty program focused on vulnerabilities in its Defender products. The post Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products appeared first on SecurityWeek.

CyberArk unveils passwordless authentication options to reduce credential theft

CyberArk has expanded passwordless authentication capabilities with new passkeys support. Now, CyberArk Identity customers can accelerate passwordless adoption and reduce cybersecurity risk by enabling the use of passkeys to easily access apps ...

Humans Are Notoriously Bad at Assessing Risk

When too much subjectivity is mixed into risk assessment, it can produce a risk picture that is not an accurate representation of reality.  The post Humans Are Notoriously Bad at Assessing Risk appeared first on SecurityWeek.

Kansas Officials Blame 5-Week Disruption of Court System on ‘Sophisticated Foreign Cyberattack’

Cybercriminals hacked into the Kansas court system, stole sensitive data and threatened to post it on the dark web in a ransomware attack that has hobbled access to records. The post Kansas Officials Blame 5-Week Disruption of Court System on ...

Microsoft announces Defender bug bounty program

Microsoft has announced a new bug bounty program aimed at unearthing vulnerabilities in Defender-related products and services, and is offering participants the possibility to earn up to $20,000 for the most critical bugs. The Microsoft Defender ...

ENow App Governance Accelerator helps organizations identify risky apps

ENow releases its App Governance Accelerator software to help organizations get control and remain in control of their Microsoft Entra ID apps. This product enables companies to understand their current security posture, define actionable areas ...

Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability

Administrators are urged to patch the recent CitrixBleed NetScaler vulnerability as LockBit starts exploiting it. The post Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability appeared first on SecurityWeek.

Coincover collaborates with Utila to improve crypto asset management

Coincover has joined forces with Utila, an enterprise-grade crypto operations platform. This strategic partnership brings together Coincover’s renowned protection solutions and Utila’s secure, non-custodial wallet infrastructure. The Utila ...

Insights from SentinelOne’s OneCon23

Earlier in the month I had the chance to attend OneCon, SentinelOne’s first ever customer conference in Boca Raton, Florida. This event was a pleasure to be at, not least as the Florida weather in November is considerably better than what ...

ReversingLabs Launches Software Supply Chain Security Availability in AWS Marketplace

We are thrilled to introduce another powerful way to add software supply chain security to your security strategy. Beginning November 20, ReversingLabs software supply chain security will be available directly through AWS Marketplace, improving ...