Application Security News and Articles


DEF CON 31 – Panel: ‘Hack the Future – Why Congress & White House Support AI Red Teaming’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

What is Endpoint Encryption: Unveiling A Data Security Strategy

Understanding Endpoint Encryption: The First Line of Data Defense Today, safeguarding sensitive information has become paramount for businesses of all sizes. At the forefront of this protective shield is endpoint encryption, a critical component ...

Patch Tuesday Update – November 2023

This month, Microsoft announced fixes for 58 new vulnerabilities this month, including 3 new zero-day vulnerabilities, 1 updated to a previously identified zero-day and 3 Microsoft-rated critical vulnerabilities. This month there were 3 new ...

Automating your way out of an AppSec staffing shortage

If you’re like most companies, you might be struggling to hire and retain skilled application security staff. According to a 2023 study by the Information Systems Security Association (ISSA), 71% of companies feel they are negatively impacted ...

November 2023 Product Release News

November Product Release News November marks an important milestone in the execution of a rich product roadmap for HYAS Insight. We are delivering on a significant component that is one part of an exciting path to a “next-gen” version of the ...

Randall Munroe’s XKCD ‘Empiricism’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD! Permalink The post Randall Munroe’s XKCD ‘Empiricism’ appeared first on Security Boulevard.

Data Broker Removal Services: A Necessity for Cybersecurity for Active Duty Military

Our nation’s servicemen and servicewomen sacrifice a lot to protect us, both here and overseas. They put their lives on the line every day to ensure we are safe from all different forms of threats. Our armed forces are in the line of danger ...

What CISOs Need to Know: Qmulos Shares Top 6 Insights From This Year’s Conferences

By: Igor Volovich, VP, Compliance Strategy Technology and the threats and vulnerabilities that impact its resilience and trustworthiness keep cybersecurity professionals, especially CISOs, constantly vigilant. This year, the Qmulos team attended ...

Entrust a Challenger in 2023 Gartner® Magic Quadrant™ for Access Management

We feel for any company in information technology, being recognized in the Gartner Magic Quadrant... The post Entrust a Challenger in 2023 Gartner® Magic Quadrant™ for Access Management appeared first on Entrust Blog. The post Entrust a ...

Stay safe while shopping online on Black Friday and Cyber Monday

The holiday season is upon us, and with it comes the excitement of Black Friday and Cyber Monday. These annual shopping extravaganzas have transitioned from in-store chaos to virtual shopping sprees, offering consumers incredible deals from the ...

Deploying Digital Certificate Linting

In a previous blog we introduced Digital Certificate Linting. It is interesting how certification authorities... The post Deploying Digital Certificate Linting appeared first on Entrust Blog. The post Deploying Digital Certificate Linting ...

ForgeRock Recognized as a Leader in the 2023 Gartner® Magic Quadrant™ for Access Management

We are honored to be acknowledged as a Leader in the Gartner® Magic Quadrant™ for Access Management for the fourth consecutive year. To us, this recognition is an acknowledgement to our deep understanding of the market, our teams of ...

DEF CON 31 Packet Hacking Village – Pete Hay’s ‘The Importance Of Arts And Crafts In ThreatOps’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

CISA to Provide Cybersecurity Services to Critical Infrastructure Entities

The federal government’s top cybersecurity agency wants to become the managed services provider for commercial critical infrastructure entities, which have become an increasing target of cybercriminals. The Cybersecurity and Infrastructure ...

FCC’s Got New Rules for SIM-Swap and Port-Out Fraud

Too many times: Federal Communications Commission shuts stable door after horse bolted. But chairwoman Jessica Rosenworcel (pictured) was hoping it would save us. The post FCC’s Got New Rules for SIM-Swap and Port-Out Fraud appeared first on ...

Secure by Default: Integrating GitGuardian in Vermeer’s Software Development Lifecycle

Discover how Vermeer Corporation transformed its software development lifecycle to prioritize security. Learn about their journey from open-source tools to adopting GitGuardian for seamless, integrated secret scanning, enhancing DevSecOps with a ...

XDR Cybersecurity: Technologies and Best Practices

The implementation of an XDR strategy can significantly strengthen an organization's cybersecurity framework. The post XDR Cybersecurity: Technologies and Best Practices appeared first on Security Boulevard.

CISA Releases Cybersecurity Guidance for Healthcare, Public Health Organizations

New CISA guidance details cyber threats and risks to healthcare and public health organizations and recommends mitigations. The post CISA Releases Cybersecurity Guidance for Healthcare, Public Health Organizations appeared first on SecurityWeek.

Complete Guide to OT Threat Detection and Response

In a forever dynamic industrial environment, the wisdom of cybersecurity guru, Bruce Schneier, has since held true: ‘Security is a process, not a product.’  In Operational Technology (OT), where the physical world converges with the digital, ...

Morgan Stanley Fined $6.5 Million for Exposing Customer Information

Morgan Stanley agrees to pay $6.5 million for exposing personal information through negligent data-security practices. The post Morgan Stanley Fined $6.5 Million for Exposing Customer Information appeared first on SecurityWeek.