Application Security News and Articles


NightDragon and CyberKnight strengthen cybersecurity in the Middle East, Turkey and Africa

NightDragon announced a new strategic partnership with CyberKnight to continue the international expansion capabilities of its portfolio companies and bring the latest CSSP innovations to customers in the Middle East, Turkey, Africa (META) and ...

Hacker Conversations: Casey Ellis, Hacker and Ringmaster at Bugcrowd

SecurityWeek interviews Casey Ellis, founder, chairman and CTO at Bugcrowd, best known for operating bug bounty programs for organizations. The post Hacker Conversations: Casey Ellis, Hacker and Ringmaster at Bugcrowd appeared first on SecurityWeek.

Chinese Hackers Target North American, APAC Firms in Web Skimmer Campaign

A Chinese threat actor has been observed targeting organizations in multiple industries to deploy web skimmers on online payment pages. The post Chinese Hackers Target North American, APAC Firms in Web Skimmer Campaign appeared first on SecurityWeek.

Egnyte simplifies AI deployment for customers in AEC industries

Egnyte announced vertical AI solutions for the Architecture, Engineering, and Construction (AEC) industries. The new solutions will simplify AI deployment and improve model accuracy for customers in AEC industries. Egnyte customers can use the ...

CISA Says Owl Labs Vulnerabilities Requiring Close Physical Range Exploited in Attacks

CISA says Owl Labs video conferencing device vulnerabilities that require the attacker to be in close range exploited in attacks The post CISA Says Owl Labs Vulnerabilities Requiring Close Physical Range Exploited in Attacks appeared first on ...

Cybersecurity M&A Roundup for First Half of September 2023

A dozen cybersecurity-related M&A deals were announced in the first half of September 2023. The post Cybersecurity M&A Roundup for First Half of September 2023 appeared first on SecurityWeek.

What is Fintech Risk and Compliance and How to Follow Regulations

Fintech Risk and compliance ensures fair lending practices, transparent disclosure of conditions, and availability of dispute resolutions. The post What is Fintech Risk and Compliance and How to Follow Regulations appeared first on Scytale. The ...

What is Continuous Threat Exposure Management (CTEM)?

Continuous Threat Exposure Management (CTEM) integrates threat intelligence situational awareness and automated response capabilities. The post What is Continuous Threat Exposure Management (CTEM)? appeared first on Security Boulevard.

Effective Measures to Enhance API Security

Have you ever thought about how API security is vital in 2023? Application Programming Interfaces (APIs) are crucial for facilitating communication across different software structures. They make it possible for packages to communicate and ...

Never use your master password as a password on other accounts

One in three Americans now use password managers, up from one in five in 2022, according to an online poll by Security.org that quizzed 1,051 American adults on how they use passwords and password managers. How users choose and use password ...

Balancing budget and system security: Approaches to risk tolerance

Data breaches are a dime a dozen. Although it’s easy to look at that statement negatively, the positive viewpoint is that, as a result, cybersecurity professionals have plenty of learning moments. Learning what went wrong and why can be a good ...

An inside look at NetSPI’s impressive Breach and Attack Simulation platform

In this Help Net Security interview, Scott Sutherland, VP of Research at NetSPI, delves into the intricacies of their Breach and Attack Simulation (BAS) platform and discusses how it offers unique features – from customizable procedures to ...

LLM Guard: Open-source toolkit for securing Large Language Models

LLM Guard is a toolkit designed to fortify the security of Large Language Models (LLMs). It is designed for easy integration and deployment in production environments. It provides extensive evaluators for both inputs and outputs of LLMs, offering ...

Avoiding domain security risks when taking your business online

Unfortunately, as available domain extensions increase in variety (and uniqueness), so do security risks. In this Help Net Security video, Prudence Malinki, Head of Industry Relations at Markmonitor, discusses best practices enterprises should ...

Companies still don’t know how to handle generative AI risks

Energized by the hype around generative AI, enterprises are aggressively pursuing practical applications of this new technology while remaining cautious about the risks, according to ISG. ISG research shows 85% of companies surveyed believe ...

Organizations are racing against time to meet the PCI DSS 4.0 deadline

Payment data security concerns remain widespread as organizations undertake significant lift to meet the PCI DSS 4.0 deadline, according to Bluefin. 94% of survey respondents said they have significant or very significant concerns pertaining to ...

Who’s Behind the 8Base Ransomware Website?

The victim shaming website operated by the cybercriminals behind 8Base -- currently one of the more active ransomware groups -- was until earlier today leaking quite a bit of information that the crime group probably did not intend to be made ...

Automated Vulnerability Detection: Mitigate Fraud and Strengthen Your Cybersecurity Defense

Don't let cybercriminals exploit your weaknesses. Empower your cybersecurity defense with automated vulnerability detection and mitigate fraud effectively. The post Automated Vulnerability Detection: Mitigate Fraud and Strengthen Your ...

A New CINOSHI Cryptocurrency Stealing Malicious Software Spotted in the Wild

I just came across to a newly released cryptocurrency stealing malicious software as a service cybercrime ecosystem proposition which has a lot of cryptocurrency and related accounting data stealing capabilities.   Sample screenshots: Sample ...

A New Kristina CS DIY Ransomware Spotted in the Wild

I just came across to a new DIY ransomware offered within the cybercrime ecosystem. Priced at $2,500 it also offers something I haven't seen in a while in specific for a ransomware cybercrime ecosystem proposition namely its self-propagating ...