Application Security News and Articles


Educating the Next Cybersecurity Generation with Tib3rius

In this episode we explore the remarkable journey of Tib3rius, a web application hacking expert and content creator. In this engaging conversation, we discuss: Tib3rius’ passion for community education and content creation. What fuels his ...

How organizations can combat rising cloud costs with FinOps

When it comes to the cloud, many organizations prioritize speed over spend. In fact, spending on public cloud services is forecasted to grow 21.7% to a total of $597.3 billion in 2023, according to Gartner. How can organizations spend more ...

Inadequate IoT protection can be a costly mistake

97% of organizations are struggling to secure their IoT and connected products to some degree, according to Keyfactor. The research survey also found that 98% of organizations experienced certificate outages in the last 12 months, costing an ...

Keeping control in complex regulatory environments

Modern compliance programs represent a strategic shift in how companies approach regulatory and ethical obligations. They are designed to not only mitigate risks and avoid legal repercussions but also to enhance an organization’s ...

OT/ICS Vulnerability Assessment and Penetration Testing (VAPT) – A Complete Guide

Have you ever wondered about the hidden chinks in the armor of your operational technology systems? In the interconnected web of technology, where the digital landscape extends its reach into every corner of our lives, safeguarding data and ...

DEF CON 31 – Marcelo Salvati’s (@byt3b133d3r) ‘SpamChannel – Spoofing Emails From 2M+ Domains & Virtually Becoming Satan’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

Qatari Diar Eliminates IT Visibility Gaps to Deliver Transformative Real Estate with LogRhythm SIEM

Qatari Diar was established in 2005 by the Qatar Investment Authority, the sovereign wealth fund of the State of Qatar. Today, it is one of the world’s most trusted and respected real estate companies recognized for its commitment to ...

Where Next for States on All Things IT and Security?

The 2023 NASCIO Annual Conference wrapped up this past week in Minneapolis. Here's a quick roundup of what happened and what’s next for state IT and cybersecurity. The post Where Next for States on All Things IT and Security? appeared first on ...

Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modules

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Turning military veterans into cybersecurity experts In this Help Net Security interview, James Murphy, the Director of the TechVets Programme ...

Unlock Threat Hunting with MITRE ATT&CK: A 2023 Guide You Can’t Miss

Introduction In today’s rapidly evolving cyber landscape, proactive threat hunting is no longer a luxury—it’s a necessity. Gone are the days when traditional security measures could fully protect your network. Now, you need to actively seek ...

DEF CON 31 – Tamas Jos ‘Spooky Authentication At A Distance’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

2023 OWASP Top-10 Series: Wrap Up

Over the past several months, we've taken a journey through the new 2023 OWASP API Security Top-10 list. In the previous 12 weekly posts, we've delved into each category, discussed what it is, how it's exploited, why it matters, and suggested ...

Unleashing Synergy: How Secureflo’s AI and ML-Powered Services Elevate Cybersecurity and DevOps

Unleashing Synergy: How Secureflo’s AI and ML-Powered Services Elevate Cybersecurity and DevOps Unleashing Synergy: How Secureflo’s AI and ML-Powered Services […] The post Unleashing Synergy: How Secureflo’s AI and ML-Powered Services ...

How to Use MITRE ATT&CK in 2023: A Must-Read Guide

Introduction In 2023, cybersecurity remains a pressing concern for businesses big and small. At the heart of this ever-evolving landscape is the MITRE ATT&CK framework. Designed to arm IT professionals with actionable insights, this framework ...

Crowdsourced Security-as-a-Service

TechSpective Podcast Episode 119   If you want to prevent threat actors from infiltrating or compromising your environment, it helps to see things from the threat actor perspective. This concept has been fundamental to cybersecurity for many ...

How to use DSF Collections & Index Patterns – A Tutorial

In conventional terminology, Imperva Data Security Fabric (DSF) is a database system, replete with a GUI interface for aggregation pipeline building, workflow orchestration, extensible scripting (Playbooks), and self-service data discovery ...

DEF CON 31 – David Melendez, Gabriela Garcia ‘Spread Spectrum Techniques For Anti Drone Evasion’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

IAM Security for Zero Trust: Advanced Access Management and Control

Say goodbye to the network perimeter you know and love. Its days are numbered, and... The post IAM Security for Zero Trust: Advanced Access Management and Control appeared first on Entrust Blog. The post IAM Security for Zero Trust: Advanced ...

Randall Munroe’s XKCD ‘Earth Layers’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD! Permalink The post Randall Munroe’s XKCD ‘Earth Layers’ appeared first on Security Boulevard.

Open source risk management: Safeguarding software integrity

In the constantly shifting terrain of software supply chains, open source software (OSS) fulfills a dual mandate, propelling innovation forward and serving as the cornerstone of operational efficiency. The post Open source risk management: ...