Application Security News and Articles


US Government Releases Anti-Phishing Guidance

CISA, NSA, FBI, and MS-ISAC have released guidance and prevention recommendations on common phishing techniques. The post US Government Releases Anti-Phishing Guidance appeared first on SecurityWeek.

Microsoft’s Vulnerability: How the Storm-0558 APT Penetrated the Tech Giant

Advanced Persistent Threats (APTs) are insidious cyberattacks that pose severe threats to organizations. What makes APTs uniquely dangerous is their stealthy nature; attackers gain unauthorized access to an organization’s network and maintain ...

Threat Informed Defense: Making ATT&CK Your Own

Hear from the experts on how to leverage MITRE ATT&CK, the importance of customization, and how to go beyond the framework’s limitations. The post Threat Informed Defense: Making ATT&CK Your Own appeared first on SafeBreach. The post ...

The Real Cost of Hiring Azure DevOps Engineers

These days, large organizations and startups are worried about the expense of hiring an Azure DevOps engineer. The problem is that these experts alter both the development process and the final product significantly. Automation, heightened ...

Google Play Protect Gets Real-Time Code Scanning

Google improves Android devices’ proactive protections against malware with real-time scanning at code level. The post Google Play Protect Gets Real-Time Code Scanning appeared first on SecurityWeek.

Former Uber CISO Appealing His Conviction

Joe Sullivan, Uber’s CEO during their 2016 data breach, is appealing his conviction. Prosecutors charged Sullivan, whom Uber hired as CISO after the 2014 breach, of withholding information about the 2016 incident from the FTC even as its ...

Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000

The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US. The post Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000 appeared first on SecurityWeek.

Mastercard enhances its solutions using AI technology

With the relentless demand on banks to maintain consumer trust in an ever-evolving payments landscape, Mastercard has launched a new suite of enhanced solutions using AI to help them make good on the promise of ‘always-on’ payments. With ...

Operations of Healthcare Solutions Giant Henry Schein Disrupted by Cyberattack

Healthcare solutions giant Henry Schein has disclosed a cybersecurity incident that disrupted operations and possibly led to a data breach. The post Operations of Healthcare Solutions Giant Henry Schein Disrupted by Cyberattack appeared first on ...

Google Play Protect takes on malicious apps with code-level scanning

Google is enhancing Google Play Protect’s real-time scanning to include code-level scanning, to keep Android devices safe from malicious and unwanted apps, especially those downloaded (or sideloaded) from outside of the Google Play app ...

Celebrating Cyber Security Awareness Month by Creating Awareness

Technology has made life easier not only for households but also for businesses. However, technology has also paved the way for cybercriminals to spread their roots and come up with new ways to attack businesses.  43% of these cyber attacks ...

Resecurity partners with Spire Solutions to protect organizations in the MEA region

Resecurity announced a partnership with Spire Solutions, the Middle East & Africa region’s preferred security & data partner and leading value-added distributor. The partnership is aimed at addressing the growing challenges of ...

North Korean Hackers Exploiting Recent TeamCity Vulnerability

Multiple North Korean hacking groups have exploited a recent TeamCity vulnerability and Microsoft warns of potential supply chain attacks. The post North Korean Hackers Exploiting Recent TeamCity Vulnerability appeared first on SecurityWeek.

2024 cybersecurity predictions: GenAI edition

Unless you have lived under a rock for the past year, you know that generative artificial intelligence applications, such as ChatGPT, have penetrated many aspects of our online lives. From generating marketing content, creating images for ...

Google ads for KeePass, Notepad++ lead to malware

Users using Google to search for and download the KeePass password manager and the Notepad++ text editor may have inadvertently gotten saddled with malware, says Jérôme Segura, Director of Threat Intelligence at Malwarebytes. Malvertising via ...

Understanding the Difference Between Penetration Testing and Vulnerability Scanning

Our clients often ask, “What is the difference between vulnerability scanning and penetration testing?” It’s a question that deserves attention, not only because of its frequency but also due to its critical role in shaping an ...

The Urgency for Robust Utility Cybersecurity

The need for improved utility cybersecurity has never been more  critical   The utility industry, encompassing everything from water treatment facilities to nuclear power stations, represents the backbone of modern civilization. As the arteries ...

The must-knows about low-code/no-code platforms

The era of AI has proven that machine learning technologies have a unique and effective capability to streamline processes that alter the ways we live and work. We now have the option to listen to playlists carefully curated to match our taste by ...

Reinforcing cybersecurity: The network’s role to prevent, detect, and respond to attacks

It’s always DNS. That’s what the famous internet meme popular among sysadmins says anyway. It’s funny because while clearly, every network issue doesn’t resolve to some funky DNS issue, too many network admins have banged their heads ...

Addressing cyber threats in healthcare operational technology

The proliferation of connected medical devices (IoMT) in hospitals demands a holistic approach to cybersecurity beyond just the digital IT realm. Industrial cybersecurity (OT) requires integrated solutions to address its unique challenges. In ...