Application Security News and Articles


Top Cloud Privileged Access Management Solution Providers for Your Type of Organization

Gartner recently released its annual Magic Quadrant for Privileged Access Management (PAM), offering insights into the leading solutions in the PAM space. While Gartner’s list is comprehensive and a good resource for those looking into PAM ...

Cybersecurity Awareness Month 2023: Five Reasons You Need Automatic Software Updates for Your Application Security.

To mark Cybersecurity Awareness Month 2023, discover five key reasons why automated software updates are so vital for your application security. The post Cybersecurity Awareness Month 2023: Five Reasons You Need Automatic Software Updates for ...

Evolving conversations: Cybersecurity as a business risk

Board members often lack technical expertise and may not fully grasp cyber risks. On the other hand, CISOs are more accustomed to interfacing with IT staff. This is understandable; the board is responsible for guiding high-level decision-making. ...

NIST 800-82 R2/R3: A Practical Guide for OT Security Professionals

“Is our critical infrastructure truly secure in the face of ever-evolving cyber risks and insider threats?” This question resonates with an urgency that cannot be disregarded in a world where technology is woven into every facet of our ...

CISO’s compass: Mastering tech, inspiring teams, and confronting risk

In this Help Net Security interview, Okey Obudulu, CISO at Skillsoft, talks about the increasing complexity of the CISO role and challenges they face. He discusses the business environment, tech innovation, the evolving regulatory landscape, ...

GenAI in software surges despite risks

In this Help Net Security video, Ilkka Turunen, Field CTO at Sonatype, discusses how generative AI influences and impacts software engineers’ work and the software development lifecycle. According to a recent Sonatype survey of 800 ...

Chalk: Open-source software security and infrastructure visibility tool

Chalk is a free, open-source tool that helps improve software security. You add a single line to your build script, and it will automatically collect and inject metadata into every build artifact: source code, binaries, and containers. Gaining ...

Mirai Botnet’s New Wave: hailBot,kiraiBot, catDDoS, and Their Fierce Onslaught

I. Abstract In September 2023, NSFOCUS global threat hunting system monitored several new botnet variant families developed based on Mirai, among which hailBot, kiraiBot and catDDoS are the most active, are accelerating their spread, and are ...

Barriers preventing organizations from DevOps automation

Organizations’ investments in DevOps automation are delivering significant benefits, including a 61% improvement in software quality, a 57% reduction in deployment failures, and a 55% decrease in IT costs, according to Dynatrace. In most ...

A Closer Look at Prospect Medical Holdings’ Ransomware Nightmare

Medical service providers have increasingly become prime targets for cyber attackers, primarily due to the wealth of personal and medical information they store. It’s crucial to understand the magnitude of such breaches, not just in terms of ...

Building a Career in Cyber Security: The Biggest Lie

TL;DR: Cybersecurity is a complex and challenging field, and it's important to have realistic expectations about what it takes to get started. Don't believe the hype that you can become a cyber security expert overnight. The post Building a ...

Software Consumers Are Not Waiting For SBOMs

The post Software Consumers Are Not Waiting For SBOMs appeared first on CodeSecure. The post Software Consumers Are Not Waiting For SBOMs appeared first on Security Boulevard.

9 Secrets Management Strategies that every company should adopt

While you might know your secrets vaults to store your organization's most sensitive assets — API keys, access tokens, and certificates — a solid secrets management strategy ensures these vaults themselves are safe and secure. The post 9 ...

Launching Tomorrow: CyberPsych Podcast with Dr. Stacy Thayer

We are very excited to announce the launch of our new podcast, CyberPsych. In an era where the digital landscape is continuously evolving and cybersecurity concerns are at an all-time high, CyberPsych aims to shed light on the intersection of ...

DEF CON 31 – Joseph Gabay’s ‘Warshopping- Phreaking Smart Shopping Cart Wheels Through RF Sniffing’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. ...

The CVE-2023-5217 Deja Vu – Another Actively Exploited Chrome Vulnerability Affecting a WebM Project Library (libvpx)

By Ofri Ouzan & Yotam Perkal, Rezilion Security Research On September 27th, 2023 Google released an update including 10 security fixes. Notably, one of these fixes, identified as CVE-2023-5217, was highlighted for having an existing exploit ...

How to Stop Phishing Attacks with Protective DNS

Phishing Threats Are Increasing in Scale and Sophistication Phishing remains one of the most dangerous and widespread cybersecurity threats. This blog examines the escalating phishing landscape, shortcomings of common anti-phishing approaches, ...

Choosing the Unified SASE Provider: The Execution Isolation Factor

Shared Processes for Packet-level Security Technologies Networking and security technologies at the packet level, such as stateful inspection firewalls, IPSEC, and load balancing, impose lower computational demands in terms of the number of CPU ...

Seceon Announces aiXDR-PMax at DattoCon23

Leading AI and ML-powered cybersecurity platform for managed services providers shares new capabilities with the Kaseya, Datto and AutoTask MSP communities. The post Seceon Announces aiXDR-PMax at DattoCon23 appeared first on Seceon. The post ...

Randall Munroe’s XKCD ‘Factorial Numbers’

via the comic artistry and dry wit of Randall Munroe, maker of XKCD! Permalink The post Randall Munroe’s XKCD ‘Factorial Numbers’ appeared first on Security Boulevard.