Application Security News and Articles


GenAI investments surge, anticipated to hit $143 billion by 2027

Enterprises will invest nearly $16 billion worldwide on GenAI solutions in 2023, according to IDC. This spending, which includes GenAI software and related infrastructure hardware and IT/business services, is expected to reach $143 billion in ...

The double-edged sword of heightened regulation for financial services

Financial services organizations are enticing targets for cybercriminals due to their significant wealth holdings, presenting abundant opportunities for monetary gain through extortion, theft, and fraud, according to Trustwave. In addition to the ...

How to Defend Against a DDoS Attack: 2023 Guide to Outsmart Cybercriminals

Introduction DDoS attacks are surging, posing a real threat to businesses big and small. In this 2023 guide, you’ll learn how to defend against a DDoS attack effectively. We’ll delve into types, tactics, and tools that fortify your network ...

Cisco IOS XE Web UI Vulnerability: A Glimpse into CVE-2023-20198

Overview On Monday, 16 October, Cisco reported a critical zero-day vulnerability in the web UI feature of its IOS XE software actively being exploited by threat actors to install Remote […] The post Cisco IOS XE Web UI Vulnerability: A Glimpse ...

CMMC Compliance Tools: A Checklist for Endpoint Device Protection

While PreVeil’s platform protects CUI in Email and Files, CUI inevitably also comes in touch with your workplace’s endpoints.. Indeed, CUI is frequently processed, stored and/or transmitted via these types of endpoint devices. Thus many NIST ...

A Closer Look at HYPR’s New Identity Assurance Solution

Earlier this month, HYPR announced our unified Identity Assurance solution, developed to secure the entire modern identity lifecycle. HYPR Identity Assurance brings together the strongest passwordless authentication, comprehensive risk assessment ...

The First Step In Product Development: It’s Not Development, It’s The Idea

Product development process is a complex thing that involves transforming an idea into a tangible product. The first and most crucial stage of this process...Read More The post The First Step In Product Development: It’s Not Development, It’s ...

How Smart SOAR Enables Better Co-Managed SIEM Services

Co-managed SIEM—along with the overlapping offerings of managed SIEM and SIEM-as-a-service—has become a popular managed security service, delivered by specialized providers, MSSPs, and even some of the “big four” firms. The model can work ...

New “Complaint Stealer” Malware Escalates, Targeting Cryptocurrency Wallets & Hospitality Sector

By Cofense Intelligence A series of campaigns delivering the newly christened “Complaint Stealer” malware began in mid-October and escalated within the last 2 days. The Complaint Stealer malware is an Information Stealer that targets ...

DEF CON 31 – Laurie Kirk’s ‘Runtime Riddles – Abusing Manipulation Points In The Android Source’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

New “Complaint Stealer” Malware Escalates, Targeting Cryptocurrency Wallets & Hospitality Sector

By Cofense Intelligence A series of campaigns delivering the newly christened “Complaint Stealer” malware began in mid-October and escalated within the last 2 days. The Complaint Stealer malware is an Information Stealer that targets ...

Beat the Bots to Defeat SMS Toll Fraud in Gaming

Fraudsters use bot traffic to scale up SMS toll fraud attacks, causing significant losses to gaming platforms. By using smart bot management solutions that accurately identify malicious bots and human fraud farms, gaming platforms can prevent ...

The Role of IoT Vulnerabilities in Identity Theft: An Unseen Danger for High-Net-Worth Individuals (HNWI)

The Internet of Things (IoT) is transforming how we live and work. From smart homes to connected cars, IoT devices are embedding themselves into our daily lives. But as we embrace this new world of convenience, a hidden danger lurks – the ...

Cybersecurity Awareness Month: Automating Your Way into More Problems than Solutions

Guest Author: Neal Humphrey | VP Market Analysis | Deepwatch This Cybersecurity Awareness Month, join GuidePoint Security for A Voyage […] The post Cybersecurity Awareness Month: Automating Your Way into More Problems than Solutions ...

Randall Munroe’s XKCD ‘Professional Oaths’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD! Permalink The post Randall Munroe’s XKCD ‘Professional Oaths’ appeared first on Security Boulevard.

Cisco IOS XE Zero-Day: Network Supply Chain Vulnerabilities Underscore Lack of Threat Detection

40,000 devices compromised and counting: That’s what we’re facing with the zero-day vulnerability in Cisco’s IOS XE software used in its routers, switches, and access points, both physical and virtual. This is still a developing story, but ...

BTS #15 – Reverse Engineering BMCs and Other Firmware – Vladyslav Babkin

Show Notes The post BTS #15 - Reverse Engineering BMCs and Other Firmware - Vladyslav Babkin appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise. The post BTS #15 – Reverse Engineering BMCs and Other Firmware ...

Harmonic Lands $7M Funding to Secure Generative AI Deployments

British startup is working on software to mitigate against the ‘wild west’ of unregulated AI apps harvesting company data at scale. The post Harmonic Lands $7M Funding to Secure Generative AI Deployments appeared first on SecurityWeek.