Application Security News and Articles


MixMode Awarded GSA Advantage ContractProviding 3rd Wave AI Cybersecurity Solutions to Federal Agencies

MixMode Inc., the leader in generative AI Cybersecurity solutions for real-time detection and response, today announced it has been awarded a contract for the U.S. General Services Administration (GSA). This contract authorizes MixMode to provide ...

Data Brokers Expose Sensitive US Military Member Info to Foreign Threat Actors: Study

Foreign threat actors can easily obtain sensitive information on US military members from data brokers, a Duke University study shows. The post Data Brokers Expose Sensitive US Military Member Info to Foreign Threat Actors: Study appeared first ...

IRONSCALES expands platform capabilities to improve employee phishing awareness

IRONSCALES announced its Fall ’23 Release, strengthening its foundational behavioral analysis with deep image-based detection capabilities to stop email attacks that bypass text analysis such as QR code phishing attacks (or quishing). ...

NETSCOUT releases Adaptive DDoS Protection for AED

NETSCOUT launched Adaptive DDoS Protection for Arbor Edge Defense (AED) to protect ISPs and enterprises from DNS water torture attacks. According to the NETSCOUT DDoS Threat Intelligence Report, Domain Name System (DNS) water torture attacks ...

DEF CON 31 – Michael Stepankin’s ‘mTLS When Certificate Authentication Done Wrong’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

Kentik Kube collects metadata across Kubernetes pods, clusters, and services

Kentik, the network observability company, has released Kentik Kube, a solution that reveals how Kubernetes traffic routes through organizations’ data centers, clouds, and the internet. Kentik Kube gives network, cloud, and infrastructure ...

Traefik Hub updates modernize API runtime operations

Traefik Labs added new capabilities to Traefik Hub, a Kubernetes native and GitOps-driven Application Programming Interface (API) management solution. This latest update modernizes API runtime operations for platform teams who frequently ...

Why cyberspace remains largely unaffected amidst ongoing geopolitical turmoil

The lack of any large cyber incidents doesn’t mean things are still deep under. Instead, this could well be the lull before a cyberstorm.     Earlier this week, Iran-linked APT group Charming Kitten (aka Ballistic Bobcat APT, APT35, and ...

Microsoft introduces new access policies in Entra to boost MFA usage

As part of a broader initiative to strengthen security, Microsoft is rolling out Microsoft-managed Conditional Access policies in Entra ID (formerly Azure Active Directory) to increase the use of multifactor authentication (MFA) for enterprise ...

Webinar Recap: Hands-on guide to Runtime Security for CI/CD Pipelines with StepSecurity

A condensed recap of our hands-on runtime security webinar from September. Get the juiciest knowledge nuggets and pointers to more. The post Webinar Recap: Hands-on guide to Runtime Security for CI/CD Pipelines with StepSecurity appeared first on ...

Sumo Logic launches HELM Chart V4 to unify data collection on Kubernetes clusters

Sumo Logic has launched its HELM Chart V4 feature to fully unify data collection as part of its continued commitment to OpenTelemetry (OTel). Organizations can now package, configure and deploy applications and services on Kubernetes clusters ...

What Is PCI Compliance?

Rapid advancements in technology have revolutionized the way we conduct business, communicate, and interact. However, as technology evolves, so does the continuing threat of cyber risks. With technology as a two-edged sword, a data breach is no ...

Malwarebytes ThreatDown helps organizations to overpower threats

Malwarebytes launched ThreatDown, the product family that protects IT-constrained organizations with effective, easy-to-use cybersecurity. Formerly named Malwarebytes for Business, ThreatDown solutions are purpose-built to overpower threats, ...

What Developers Need to Succeed for Effective Application Security

Incorporate security into your development processes. Set your developers up for security success with these tips. The post What Developers Need to Succeed for Effective Application Security appeared first on Mend. The post What Developers Need ...

Why Policy-as-Code is the Best Way to Streamline Authorization

A Styra survey found that policy-as-code is vital for organizations' preventative security and compliance objectives. The post Why Policy-as-Code is the Best Way to Streamline Authorization appeared first on Security Boulevard.

ExtremeCloud Universal ZTNA strengthens network security

Extreme Networks introduced ExtremeCloud Universal Zero Trust Network Access (ZTNA). Offered as a subscription service for ExtremeCloud customers, Universal ZTNA is a network security offering to integrate network, application, and device access ...

New MacOS Malware Linked to North Korean Hackers

New macOS malware, tracked by Jamf as ObjCShellz, is likely being used by North Korean hackers to target crypto exchanges The post New MacOS Malware Linked to North Korean Hackers appeared first on SecurityWeek.

OWASP Top 10 for LLM update bridges the gap between app sec and AI

The post OWASP Top 10 for LLM update bridges the gap between app sec and AI appeared first on Security Boulevard.

Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities

A new free tool named OpalOPC helps industrial organizations find OPC UA misconfigurations and vulnerabilities. The post Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities appeared first on SecurityWeek.

New SEC Disclosure Rules Demand Better CISO Communication

The SEC's charges against SolarWinds and its CISO follow a new set of rules that put greater responsibility on organizations' leadership. The post New SEC Disclosure Rules Demand Better CISO Communication appeared first on Security Boulevard.