Application Security News and Articles


SUSE boosts cloud native portfolio to enhance customer productivity

SUSE released Rancher Prime 2.0, enhancing customers’ ability to manage heterogeneous, multi-cloud Kubernetes deployments securely and at scale. SUSE also revealed updates to Rancher community edition, SLE Micro 5.5 and the future of SUSE ...

Decoupling for Security

This is an excerpt from a longer paper. You can read the whole thing (complete with sidebars and illustrations) here. Our message is simple: it is possible to get the best of both worlds. We can and should get the benefits of the cloud while ...

Druva introduces Azure VM backup and recovery capabilities

Druva announced cloud-native protection for Azure backups, enabling customers to leverage the simplicity and value of SaaS across their cloud deployments. Druva’s 100% agentless, cloud-native SaaS solution provides air-gapped backups for Azure ...

Sumo Logic discloses potential breach via compromised AWS credential

Cloud-native big data and security analytics firm Sumo Logic is investigating a potential security incident within their platform, the company revealed on Tuesday. The Sumo Logic incident “On Friday, November 3rd, 2023, Sumo Logic ...

FBI Highlights Emerging Initial Access Methods Used by Ransomware Groups 

FBI warns that ransomware operators continue to abuse third-party vendors and services as an attack vector. The post FBI Highlights Emerging Initial Access Methods Used by Ransomware Groups  appeared first on SecurityWeek.

LastPass and Acronis join forces to strenghten password protection for MSPs

LastPass and Acronis announced a partnership to provide password management integration for managed service providers (MSPs) using Acronis Cyber Protect Cloud, an all-in-one data and cybersecurity protection platform. The integration, accessible ...

Marina Bay Sands Discloses Data Breach Impacting 665k Customers

Singapore’s Marina Bay Sands luxury resort has disclosed a data breach impacting the information of 665,000 customers.  The post Marina Bay Sands Discloses Data Breach Impacting 665k Customers appeared first on SecurityWeek.

Dropper Service Bypassing Android Security Restrictions to Install Malware

ThreatFabric warns of a dropper service bypassing recent Android security restrictions to install spyware and banking trojans. The post Dropper Service Bypassing Android Security Restrictions to Install Malware appeared first on SecurityWeek.

Marina Bay Sands breach exposed data of 665,000 customers

Singapore-based luxury resort and casino Marina Bay Sands has suffered a data breach that exposed data of 665,000 non-casino rewards program members. The Marina Bay Sands data breach “Marina Bay Sands became aware of a data security ...

NextGen’s Vulnerability: Protecting Healthcare Data

In the realm of healthcare, the security and integrity of patient data are paramount. However, a recent discovery has shed light on a critical vulnerability within Mirth Connect, an open-source data integration platform by NextGen HealthCare. ...

New TuxCare Partner Program Arms System Integrators with Modernized Linux Security Offerings

PALO ALTO, Calif. – November 8, 2023 – TuxCare, a global innovator in enterprise-grade cybersecurity for Linux, today announced it debuted a new partner program aimed at helping system integrators offer the latest tools for modernizing their ...

Avoiding Common Linux Configuration Mistakes that Lead to Security Vulnerabilities

The robust security features of Linux make it the preferable choice for many enterprises. However, like any other operating system, security vulnerabilities can occur in Linux due to misconfigurations. These vulnerabilities may expose your system ...

GUEST ESSAY: The many channels law enforcement pursues to mitigate cyber threats

Throughout 2023, we’ve witnessed numerous significant cyber incidents. One of the largest this year was the MOVEit breach, which impacted various state motor vehicle organizations and exposed driver’s license information for nearly 9.5 ...

Firefox and Chrome Updates Patch High-Severity Vulnerabilities

Mozilla and Google have recently released important security updates for their web browsers, Firefox and Chrome. These updates include patches for several vulnerabilities, including some potentially harmful memory safety bugs. First, let’s talk ...

The 3 key stages of ransomware attacks and useful indicators of compromise

For SOC teams to be able to defend their organization against ransomware attacks, they need to have the right security toolset, but also an understanding of the three primary ransomware attack stages. In this article, we will dive into those key ...

Aqua Trivy open-source security scanner now finds Kubernetes security risks

The Aqua Trivy open-source scanner now supports vulnerability scanning for Kubernetes components and Kubernetes Bill of Materials (KBOM) generation. Now, companies can better understand the components within their Kubernetes environment and how ...

AI-assisted coding and its impact on developers

The emergence of AI has put into question the roles of software developers everywhere. In this Help Net Security video, Cat Hicks, VP of Research Insights at Pluralsight, discusses pressing questions that engineering organizations face regarding ...

Companies have good reasons to be concerned about generative AI

Companies need help to get visibility into the operations of their AI programs, potentially reducing productivity while creating significant risks around governance, data security, and more, according to Portal26. Two-thirds of respondents ...

Uphold Linux systems’ performance and availability in Azure

Cloud computing carries many benefits for your business… as long as you can ensure the performance and availability of your cloud environments. Let’s take the following three cloud computing benefits as examples. Rapidly scale cloud ...

Download: The Ultimate Guide to the CISSP

The The Ultimate Guide to the CISSP covers everything you need to know about the world’s premier cybersecurity leadership certification. Learn how CISSP and ISC2 will help you navigate your training path, succeed in certification, and advance ...