Application Security News and Articles
Microsoft has released its latest round of security updates for October 2023. In its most recent Patch Tuesday, the updates are intended to provide fixes for a total of 104 vulnerabilities, with a particular focus on addressing three actively ...
The National Security Agency released a code repository in GitHub to make it easier for critical infrastructure organizations and similar entities to better identify and detect potentially malicious activities in their operational technology (OT) ...
This is why we can’t have nice things: 38 victims of Apple’s “negligence” named in amended class action.
The post Stalking: Fear of Apple AirTag ‘Explodes’ — Lawsuit Momentum Grows appeared first on Security Boulevard.
Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content.
Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...
Progress Software is now adding an investigation by the U.S. Securities and Exchange Commission to its growing list of legal and financial headaches stemming from the massive hack of its MOVEit file transfer tool that has affected more than 2,500 ...
CISA is now flagging vulnerabilities and misconfigurations that are known to be exploited in ransomware attacks.
The post CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware appeared first on SecurityWeek.
For every $1 spent, email marketing generates $36 ...
The post EasySender: EasyDMARC’s New Email Deliverability Platform appeared first on EasyDMARC.
The post EasySender: EasyDMARC’s New Email Deliverability Platform appeared first on ...
As signs of a global recession continue to pile up, many businesses are tightening their spending across the board. Though cybersecurity remains a critical concern for virtually every type of organization, even security leaders may need to watch ...
By: Robert O’Callaghan A method of communication that remains important in our modern world is that of the voice message. The PDC recently observed a phishing campaign where threat actors included an access key in the body as a way to entice ...
Insight #1
Google is now
defaulting to the use of passkeys for authentication. This is a huge step in increasing the strength of the authentication mechanism out of the box for users, and, at the same time, makes it easier to use.
The post ...
Juniper Networks patches over 30 vulnerabilities in Junos OS and Junos OS Evolved, including nine high-severity bugs.
The post Juniper Networks Patches Over 30 Vulnerabilities in Junos OS appeared first on SecurityWeek.
In a world where the rich and famous often escape to luxurious island communities, seeking refuge from the pressures of their everyday lives, a disturbing reality has emerged. These paradises, once seen as sanctuaries, are now digital ...
In Other
The post In Other News: Ex-Uber Security Chief Appeal, New Offerings From Tech Giants, Crypto Bounty appeared first on SecurityWeek.
DigiCert announced its next generation Discovery, a set of key capabilities in DigiCert Trust Lifecycle Manager that enable customers to build a centralized book of record of their cryptographic keys and certificates. This centralized view, when ...
IDEMIA announced the development of a secure, standards-based converged access card for the enterprise access market, in collaboration with HYPR and Wavelynx. The creation of this smart credential will help organizations meet compliance and ...
More than just breach mitigation – File integrity monitoring (FIM) is trust and compliance Every day, we see an ever-escalating array of cyber threats. As organizations race to safeguard their digital assets, the spotlight isn’t just on ...
Dozens of Squid caching proxy vulnerabilities remain unpatched two years after a researcher reported them to developers.
The post Dozens of Squid Proxy Vulnerabilities Remain Unpatched 2 Years After Disclosure appeared first on SecurityWeek.
Microsoft is offering rewards of up to $15,000 in a new bug bounty program dedicated to its new AI-powered Bing.
The post Microsoft Offers Up to $15,000 in New AI Bug Bounty Program appeared first on SecurityWeek.
Ekran System announces its participation in the Luxembourg Internet Days. The event will take place in the Luxembourg Chamber of Commerce, November 7–8, 2023. The Luxembourg Internet Days will convene over a thousand IT, OT, and ICT ...
Unlock DevOps Success: Overcome Challenges and Boost Efficiency. Learn how to embrace collaboration, security, and scalability for better software development.
The post Achieving DevOps Success: Overcoming Implementation Challenges first appeared ...