Application Security News and Articles


DEF CON 31 – R.J. McDown’s ‘Malware Design Abusing Legacy Microsoft Transports And Session Architecture’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

IBM: New Gootloader Variant Moves Laterally and Is Harder to Detect

The operators of the Gootloader malware that is used to gain a foothold in enterprises now have a new weapon in the form of a variant that can more easily move laterally through compromised networks and is more difficult to detect and block. The ...

DHS Launches New Critical Infrastructure Security and Resilience Campaign

DHS launches Shields Ready, a new campaign promoting security and resilience for critical infrastructure organizations. The post DHS Launches New Critical Infrastructure Security and Resilience Campaign appeared first on SecurityWeek.

Entrust and NEDAP partner for credential and ID program interoperability

Entrust has unveiled a technology alliance partnership with NEDAP to deliver interoperability between credential issuance and ID program management capabilities. Managing physical access for people, visitors and assets is complex and ...

Atlassian Bug now a Perfect 10: Riot of Ransomware Raids

Step #1: Get it off the Internet—Confluence Data Center and Server on-prem products perfectly pwned, so patch. The post Atlassian Bug now a Perfect 10: Riot of Ransomware Raids appeared first on Security Boulevard.

Kasten K10 V6.5 improves ransomware and data protection for Kubernetes environments

Kasten by Veeam has announced the release of its new Kasten K10 V6.5 platform for Kubernetes. The new release introduces trusted container environments, enhanced ransomware protection and data protection support for large-scale Kubernetes ...

Cybellum partners with Hitachi Solutions to provide PLM security solutions in Japan

Cybellum and Hitachi Solutions announced its partnership to provide PLM security solutions in Japan. The PLM Security Solutions service provides one-stop support for uncovering and managing cybersecurity vulnerabilities from the design to ...

Offense Intended: How Adversarial Emulation Went From State Secret To Board Bullet Point

Offensive Security does not focus on discreet attacks, singular actors, or Indicators of compromise, but understands the entirety of both sides of the battlefield. The post Offense Intended: How Adversarial Emulation Went From State Secret To ...

Microsoft Authenticator suppresses suspicious MFA notifications

Microsoft has quietly rolled out a new mechanism that shields users of its mobile Authenticator app from suspicious (and annoying) push notifications triggered by attackers. Preventing attacks relying on MFA fatigue When faced with MFA-protected ...

Symmetrium releases IM and SMS data protection solution

Symmetrium has unveiled its Instant messaging (IM) and SMS data protection solution, which eliminates the corporate security and compliance risks associated with IM usage by employees. With messaging apps now part of daily life in many ...

Maximizing the SASE Performance: The Vital Role of ‘At Scale’ Distributed Enforcement

Network security deployment architectures undergo regular evolution, driven by various enterprise requirements. Some of the Industry recent trends are outlined below: Minimizing the cost & maintenance burden associated with disparate and ...

Elastic simplifies data investigations with piped query language, ES|QL

Elastic has unveiled Elasticsearch Query Language (ES|QL), its new piped query language designed to transform, enrich and simplify data investigation with concurrent processing. ES|QL enables site reliability engineers (SREs), ...

SAST language and framework support | Contrast Security

Contrast Security now supports Static Application Security Testing (SAST) coverage for 30 languages and frameworks, enabling code scanning for modern development pipelines with industry-leading speed and accuracy.  The post SAST language and ...

How to Safeguard EV Charging Stations From Cyberattacks

The increase in electric vehicles also presents a rising threat of cyberattacks targeting EV charging stations. The post How to Safeguard EV Charging Stations From Cyberattacks appeared first on Security Boulevard.

A Deep Dive into GraphQL API with Python Client

This article offers a simple demonstration of the capabilities of the OX API using Python. While written with assumptions of general Python knowledge around pip and CLI (Command-Line Interface) usage, developers of any language may borrow the ...

Protecto raises $4 million to empower enterprises with trusted AI

Protecto announced the close of a $4 million seed funding round. Together Fund led the round with participation from Better Capital, FortyTwo VC, Arali Ventures and Speciale Invest. The latest round brings the total raised to $5 million after ...

Sumo Logic Urges Users to Change Credentials Due to Security Breach

Cloud monitoring and SIEM firm Sumo Logic is urging users to rotate credentials following the discovery of a security breach. The post Sumo Logic Urges Users to Change Credentials Due to Security Breach appeared first on SecurityWeek.

Palo Alto Networks Adds Cloud Management Service

Palo Alto Networks' Strata Cloud Manager thwarts cyberattacks, configures platforms and predicts cybersecurity issues. The post Palo Alto Networks Adds Cloud Management Service appeared first on Security Boulevard.

ThreatX enhances API and app protection for containerized environments

ThreatX has unveiled new capabilities for its Runtime API and Application Protection (RAAP) solution. ThreatX RAAP helps CISOs and security teams extend APIs and app protection to containerized environments. ThreatX delivers this capability ...

Internet-of-Things (IoT) Security Best Practices

Undеrstanding thе IoT еcosystеm hеlps organizations dеsign and implеmеnt scalablе and sеcurе solutions for rеal-world applications and usе casеs. The post Internet-of-Things (IoT) Security Best Practices appeared first on Security ...