Application Security News and Articles


The New APT Group DarkCasino and the Global Surge in WinRAR 0-Day Exploits

Overview In 2022, NSFOCUS Research Labs revealed a large-scale APT attack campaign called DarkCasino and identified an active and dangerous aggressive threat actor. By continuously tracking and in-depth study of the attacker’s activities, ...

Weekly Blog Wrap-Up (November 6 – November 9, 2023)

Welcome to the TuxCare Weekly Blog Wrap-Up – your go-to resource for the latest insights on cybersecurity strategy, Linux security, and how to simplify the way your organization protects its data and customers. At TuxCare, we understand the ...

The 248th Marine Corps Birthday Message

Read Commandant of the U.S. Marine Corps' General Eric Smith's 248th Marine Corps Birthday Message U.S. Marine Corps Video by Staff Sgt. Joshua Chacon, Gunnery Sgt. Melissa Marnell, Staff Sgt. John Martinez and Rick Robinson Communication ...

Citrix Bleed Exploit: Protect Your NetScaler Accounts

Recently, there’s been a buzz in the tech world about a potential security risk known as the ‘Citrix Bleed’ vulnerability, officially labeled as CVE-2023-4966. This vulnerability affects Citrix NetScaler ADC and NetScaler Gateway appliances ...

Top 12 Essential PCI DSS Compliance Requirements

Following the PCI DSS or Payment Card Industry Data Security Standard, is one crucial component for businesses these days. As a business owner, have you ever considered the security of your client’s credit card information? The modern digital ...

November 2023 Patch Tuesday forecast: Year 21 begins

The October forecast for large numbers of CVEs addressed in Windows 10 and 11 and the recent record on the number fixed in Windows Server 2012 was spot on! Microsoft addressed 75 CVEs in Windows 11, 80 in Windows 10, and 61 in Server 2012 R2. ...

New infosec products of the week: November 10, 2023

Here’s a look at the most interesting products from the past week, featuring releases from Aqua Security, ARMO, Druva, IRONSCALES, Malwarebytes, and Varonis. Varonis enhances its Microsoft 365 offering to prevent sensitive email exposure ...

How to withstand the onslaught of cybersecurity threats

“We brought a shovel to fight an avalanche.” That’s the sentiment shared by many business leaders, especially CISOs, CIOs and IT leaders as they face the current cybersecurity threat landscape. Like an avalanche, it’s constantly shifting ...

Rethinking cyber risk: The case against spreadsheets

In this Help Net Security video, Christina Hoefer, VP of Global Industrial Enterprise at Forescout, discusses why it is time for manufacturers/OT security leaders to “toss the spreadsheet” regarding their traditional methods of tracking data ...

Data protection demands AI-specific security strategies

Adoption and use of AI tools is high across organizations, however many are concerned about the impacts AI will have on their larger data security strategy, according to Immuta. Only half of the respondents say their organization’s data ...

Organizations lack the skills and headcount to manage Kubernetes

The Kubernetes industry is undergoing rapid change and evolution due to the growth of edge computing, the acceleration of AI, and the pressing need to modernize Kubernetes management in response to increasing technology scale and complexity, ...

NTA SMTP Functionality Usage

Customers can enable SMTP functionality to ensure timely receipt of alert notifications and device logs. Below are the steps to configure SMTP functionality. Configuring an SMTP Server 1. Choose Administration > Third-Party Interface > ...

Sumo Logic Breach Shows Leaked Credentials Still a Persistent Threat

Sumo Logic reported a security breach on November 3, 2023, due to a compromised credential that allowed unauthorized AWS account access. The post Sumo Logic Breach Shows Leaked Credentials Still a Persistent Threat appeared first on Security ...

The Rise of Super Apps: Challenges & Opportunities in Mobile Security

In recent years, the tech world has witnessed a significant shift towards what are known as "super apps." These mobile applications have become increasingly popular, offering a plethora of services within a single, convenient platform. While they ...

Gartner® Market Guide for DLP | Why Context is King

With insider risk rising and becoming increasingly expensive, it’s becoming more incumbent on companies to figure out how they want to tackle it. Historically, one approach has been to use Data Loss Prevention (DLP) technologies. As far as ...

DEF CON 31 – Xavier ‘X’ Cadena’s ‘LLMs At The Forefront Pioneering The Future Of Fuzz Testing’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

ConnectWise #ITNation Keynote: Navigating the Future with Jason McGee

Good morning from beautiful Orlando, Florida here at IT Nation Connect 2023! This conference is always such a great gathering of friends and colleagues before we slow down the year, reflect on all of our accomplishments and start to plan for the ...

API Leaks

Grasping the Fundamentals of API Breaches API, short for Application Programming Interface, consists of a stipulated set of guidelines and procedures enabling heterogeneous software applications to establish communication amongst them. ...

Data Brokers Sell Sensitive Data of US Military and Veterans

Follow the Money: Foreign buyers welcome. No questions asked. 12¢ per. The post Data Brokers Sell Sensitive Data of US Military and Veterans appeared first on Security Boulevard.

CSO’s Perspective: The Okta Breach and What It Means to the Broader Community

Den Jones shares his perspective as a CSO on the recent Okta breach, and what that means for the broader security community. The post CSO’s Perspective: The Okta Breach and What It Means to the Broader Community first appeared on Banyan ...