Application Security News and Articles


Initial Access Brokers (IAB): What You Need to Know

Before cybercriminals can steal sensitive data, they need unauthorized access to an organization’s systems and networks. As Ransomware-as-a-Service (RaaS) models evolve the threat landscape, initial access brokers (IABs) help threat actor ...

World’s Biggest Bank Hacked: ICBC Walks Trades on USBs

Plan B is sneakernet: After Industrial and Commercial Bank of China ransomware attack, U.S. Treasury trades settled by bike messengers with flash drives. The post World’s Biggest Bank Hacked: ICBC Walks Trades on USBs appeared first on ...

Cavelo Raises CA$5 Million for Attack Surface Management Platform

Cavelo has raised CA$5 million (~US$3.6 million USD) to help organizations comply with data protection regulations. The post Cavelo Raises CA$5 Million for Attack Surface Management Platform appeared first on SecurityWeek.

In Other News: EU Government Surveillance, Rewards for Iranian Hackers, Evolution of Chinese Spying

Noteworthy stories that might have slipped under the radar: EU regulation enables government surveillance, US offering rewards for Iranian hackers, evolution of Chinese spying.  The post In Other News: EU Government Surveillance, Rewards for ...

SentinelOne integrates with Snyk for end-to-end app security

SentinelOne has partnered with Snyk to unveil the integration of SentinelOne’s Singularity Cloud Workload Security with the Snyk Developer Security Platform. The integration will correlate the cloud runtime threat detections identified by ...

Cybersecurity Workforce Facing Critical Shortfall, AI Adoption Could Help

The global cybersecurity workforce gap has increased, and most cybersecurity pros said they had skills gaps in their organization. The post Cybersecurity Workforce Facing Critical Shortfall, AI Adoption Could Help appeared first on Security ...

Intel Sued Over ‘Downfall’ CPU Vulnerability 

A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall. The post Intel Sued Over ‘Downfall’ CPU Vulnerability  appeared first on SecurityWeek.

France, UK Seek Greater Regulation of Commercial Spyware   

France and the UK are calling for greater regulation of commercial surveillance software in the wake of recent Pegasus and Predator spyware scandals. The post France, UK Seek Greater Regulation of Commercial Spyware    appeared first on ...

Deepfake Nudes – Can I Sue?

What can victims of the creation and distribution of AI-generated pornographic images do to stop the dissemination of these deepfake images? The post Deepfake Nudes – Can I Sue? appeared first on Security Boulevard.

D2iQ DKP Insights identifies security issues in Kubernetes clusters

D2iQ released DKP Insights, an automated troubleshooting and diagnostic tool. DKP Insights, along with the newly released DKP AI Navigator, enables enterprise organizations to manage Kubernetes with ease and overcome the industry-wide skills gap ...

Unraveling the Complexities of Word Documents

Word documents are indispensable in business operations due to their flexibility, ease of use, and universal accessibility. Businesses across the globe rely on Word for drafting, editing, and sharing a wide array of documents, including reports, ...

Morgan Stanley Cybersecurity Director: Teams Need to Focus on Four Rs

Morgan Stanley's cybersecurity leader said teams need to focus on four Rs: Russia, ransomware, resiliency and regulators. The post Morgan Stanley Cybersecurity Director: Teams Need to Focus on Four Rs appeared first on Security Boulevard.

Top 8 Weaknesses in Multi-Factor Authentication (MFA)

MFA makes it significantly harder for cybercriminals to access a company's digital assets. To successfully break into a system, aside from the username-password combination, an attacker would need access to certain devices, knowledge of security ...

Picus Security unveils new capabilities to give security teams full context of their attack surface

Picus Security announced the addition of Picus Attack Surface Validation and AI-driven threat profiling to the Picus Security Validation Platform. The new capabilities give security teams full context of their attack surface so they can ...

US Government Issues Guidance on SBOM Consumption

CISA, NSA, and ODNI issue new guidance on managing open source software and SBOMs to maintain awareness on software security. The post US Government Issues Guidance on SBOM Consumption appeared first on SecurityWeek.

Chinese multinational bank hit by ransomware

The state-owned Industrial and Commercial Bank of China (ICBC), which is one of the largest banks in the world, has been hit by a ransomware attack that led to disrupted trades in the US Treasury market. The attack “On November 8, 2023, ...

1.3 Million Maine Residents Impacted by MOVEit Hack

The State of Maine says the personal information of 1.3 million individuals was compromised in the MOVEit attack. The post 1.3 Million Maine Residents Impacted by MOVEit Hack appeared first on SecurityWeek.

Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say

A ransomware attack on China’s biggest bank, the Industrial and Commercial Bank of China Financial Services, disrupts Treasury market trades. The post Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say ...

Vem Pedra #01 — SAST e SCA

O mundo de application security é muito vasto, mas dentro dessa área dois tópicos são realmente muito importante e podemos dizer que são…Continue reading on Medium »

No Patches, No Security

In the cybersecurity domain, we often assume that regularly checking for and applying updates keeps our systems secure. However, a subtle nuance is frequently overlooked. When we say we’ve applied “all available patches,” what we’re ...