Application Security News and Articles


The hidden dangers of low-value data

In this Help Net Security video, Terry Ray, SVP Data Security and Field CTO at Imperva, warns organizations to stop ignoring low-value data – as criminals use it as a place to live, watch, and wait for the perfect moment to steal the crown ...

Regulatory activity forces compliance leaders to spend more on GRC tools

Legal and compliance department investment in GRC (governance, risk, and compliance) tools will increase 50% by 2026, according to Gartner. Assurance leaders are seeking out technology solutions to help them address increasing regulatory ...

Critical business app outages cost $500,000 per hour of downtime

Observability’s adoption is on the rise and full-stack observability leads to better service-level metrics, such as fewer, shorter outages and lower outage costs, according to New Relic. Respondents receive a median $2 return per $1 of ...

The Changing Role of the CISO with Ryan Davis, Chief Information Security Officer at NS1

In this episode Ryan Davis, Chief Information Security Officer at NS1, speaks with host Tom Eston about the changing role of the CISO, acquisitions, what the biggest challenges are, and Ryan’s advice for those considering a career as a CISO. ...

SQL Login using Azure Manage Identity In C#

Here are the steps on how to connect to Azure SQL using Azure Managed Identity in C#:Continue reading on Medium »

When data falls into the wrong hands

A data breach involves unauthorized access to sensitive, protected, or confidential information, often resulting in data theft, exposure, or alteration. The methods employed by cybercriminals to perpetrate these breaches are continually evolving, ...

PostgreSQL 16: Where enhanced security meets high performance

PostgreSQL is an open-source object-relational database platform with a track record of over 25 years of ongoing development. Its reputation is solid for its reliability, extensive features, and high performance. PostgreSQL 16 enhances its ...

Understanding the Cyber Kill Chain: A Comprehensive Guide to Cybersecurity

In today’s interconnected digital world, cyberattacks have become an ever-present threat to individuals, businesses, and governments. To defend against these threats effectively, cybersecurity experts have developed various frameworks and ...

Sample Breach Forums Personally Identifiable Cybercriminal Email Address Accounts

Dear blog readers, The following is a personally identifiable email address compilation known to belong to known members of the Breach Forums cybercrime-friendly forum community which I've decided to share with the idea to assist researchers ...

Cyber Week 2023 & The Israel National Cyber Directorate Presents – FraudCON In-Person

Many thanks to Israel’s Tel Aviv University for publishing their presenter’s tremendous Cyber Week 2023 security content on the Tel Aviv University’s TAUVOD YouTube channel. Permalink The post Cyber Week 2023 & The Israel National ...

Week in review: 17 free AWS cybersecurity courses, exploited Chrome zero-day

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The blueprint for a highly effective EASM solution In this Help Net Security interview, Adrien Petit, CEO at Uncovery, discusses the benefits ...

Code obfuscation is a valuable tool in the arsenal of software developers, helping protect their…

Code obfuscation is a technique used by software developers to make software code more difficult to understand and analyze to unauthorized…Continue reading on Medium »

Cyber Week 2023 & The Israel National Cyber Directorate Presents – CSA Israel Event: Deep Dive Into Cloud Security Operations

Many thanks to Israel’s Tel Aviv University for publishing their presenter’s tremendous Cyber Week 2023 security content on the Tel Aviv University’s TAUVOD YouTube channel. Permalink The post Cyber Week 2023 & The Israel National ...

Imagine Making Shadowy Data Brokers Erase Your Personal Info. Californians May Soon Live the Dream

California state Legislature has passed the Delete Act to allow individuals to order data brokers to delete their personal data — and to cease acquiring and selling it in the future. The post Imagine Making Shadowy Data Brokers Erase Your ...

2023 OWASP Top-10 Series: API8:2023 Security Misconfiguration

Welcome to the 9th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API8:2023 Security Misconfiguration. In this series we are taking an in-depth ...

When Ransomware Attacks Seem Inevitable, What Can IT Teams Do?

The possibility of their business falling victim to a cyberattack has always kept IT teams up at night, but today’s threat landscape is reaching new levels of sophistication. For example, new acoustic-based attack methods listen to the ...

LLM Summary of My Book Beyond Fear

Claude (Anthropic’s LLM) was given this prompt: Please summarize the themes and arguments of Bruce Schneier’s book Beyond Fear. I’m particularly interested in a taxonomy of his ethical arguments—please expand on that. Then lay out the ...

Attackers Target Crypto Companies in Retool Data Breach

A data breach late last month of software development platform firm Retool led to the accelerated acquisition of one of its users and put a spotlight on an account synchronization feature that Google introduced earlier this year. Retool, the ...

Cyber Week 2023 & The Israel National Cyber Directorate Presents – The Israel Healthcare Cybersecurity Summit (IHCS)

Many thanks to Israel’s Tel Aviv University for publishing their presenter’s tremendous Cyber Week 2023 security content on the Tel Aviv University’s TAUVOD YouTube channel. Permalink The post Cyber Week 2023 & The Israel National ...

Cybersecurity Insights with Contrast CISO David Lindner | 9/15

Insight #1 Software Bills of Materials (SBOMs) are nothing more than a data point for determining risk. They shouldn’t be treated as gospel. The post Cybersecurity Insights with Contrast CISO David Lindner | 9/15 appeared first on Security ...