Application Security News and Articles


Microsoft Septemer Security Updates for Multiple High-Risk Product Vulnerabilities

Overview On September 13, NSFOCUS CERT found that Microsoft had released a security update patch for September, fixing 61 security issues, involving Microsoft SharePoint Server, Visual Studio, Internet Connection Sharing (ICS), Microsoft Azure ...

Modernizing fraud prevention with machine learning

The number of digital transactions has skyrocketed. As consumers continue to spend and interact online, they have growing expectations for security and identity verification. As fraudsters become savvier and more opportunistic, there’s an ...

Will Cyber Threats Result in Decline of Fintech Industry?

The Fintech industry has emerged as an essential factor in the digital age. The revolutionized way of handling finances comes out to be necessary with emerging cyber risks in Fintech industries. The rapid development has made it a prime target ...

New infosec products of the week: September 15, 2023

Here’s a look at the most interesting products from the past week, featuring releases from Armis, Cisco, CTERA, Kingston Digital, Purism, and Swissbit. Librem 11 tablet sets new standard for privacy and security with Linux-based PureOS Purism ...

Enterprises persist with outdated authentication strategies

Despite authentication being a cornerstone of cybersecurity, risk mitigation strategies remain outdated, according to new research from Enzoic. With the attack surface expanding and the increasing sophistication of cyber threats, organizations ...

Cybersecurity risks dampen corporate enthusiasm for tech investments

64% of IT leaders believe that cybersecurity concerns are negatively impacting their organization’s willingness to invest in innovative tech, according to a report by HPE Aruba Networking. This is perhaps unsurprising as 91% either consider ...

Generative AI lures DevOps and SecOps into risky territory

Application security leaders are more optimistic than developer leaders on generative AI, though both agree it will lead to more pervasive security vulnerabilities in software development, according to Sonatype. According to the surveyed DevOps ...

Employer Obligations on Employee Data Under Indian Law

UPDATE: The Personal Data Protection Bill 2019 has been withdrawn by the Indian government after over three years of discussion. The Bill had attracted major criticisms from industry stakeholders, NGOs, privacy activists and tech platforms as it ...

Securing OTA with Harman International’s Michal Geva

The once far-off vision of remotely updating software without needing to bring it into a service center was initially designed for bug fixes and cybersecurity updates. Today, over-the-air updates (OTA) are used to activate new functionality and ...

The Details of Microsoft’s September 2023 Patch Tuesday Release

On September 12th, 2023, Microsoft released their September Patch Tuesday and revealed 59 Microsoft CVEs; 47 of them are HIGH severity and 12 of them are MEDIUM severity, along with 7 other non-Microsoft CVEs.  CVE-2023-36802 and CVE-2023-36761 ...

BSides Buffalo 2023 – Magno Logan – Hacking GitHub Actions – Abusing GitHub And Azure For Fun And Profit

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Magno Logan – Hacking GitHub Actions ...

Shifting Perspectives and Regulations Relating to Consent Management

Businesses have a certain responsibility to disclose how consumer data is being used, and if they don't, they face hefty fines and hits to their reputation. In fact, many consumers find personal data sharing to be a particular point of ...

Software Supply Chain Security: The Basics and Four Critical Best Practices

Learn about supply chain security, supply chain attacks, and how to protect your organization against this severe threat. The post Software Supply Chain Security: The Basics and Four Critical Best Practices appeared first on Mend. The post ...

A Second Major British Police Force Suffers a Cyberattack in Less Than a Month

Personal details of thousands of police officers and staff from Greater Manchester Police have been hacked from a company that makes identity cards. The post A Second Major British Police Force Suffers a Cyberattack in Less Than a Month appeared ...

Patch Tuesday Update – September 2023

Fall is here in much of America, and amidst the crunching of football pads and the smashing of apples for cider, violent activity continues relentlessly in the cybersecurity world. Microsoft announced fixes for 62 new CVEs this month, including 5 ...

Caesars Confirms Ransomware Hack, Stolen Loyalty Program Database

The hijacked data includes driver’s license numbers and/or social security numbers from a Caesars Entertainment loyalty database. The post Caesars Confirms Ransomware Hack, Stolen Loyalty Program Database appeared first on SecurityWeek.

Generative AI & Trust: A Paradigm Shift in Security

Generative AI, which includes models like GPT-3 and its successors, is changing the way people create, consume, and interact with digital content and information. In fact, it would not be an understatement to say that this type of AI is reshaping ...

Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnarav – #258 — The Business Are Happy

via the respected Software Engineering expertise of Mikkel Noe-Nygaard as well as the lauded Software Engineering and Enterprise Agile Coaching talent of Luxshan Ratnarav at Comic Agilé! Permalink The post Comic Agilé – Mikkel ...

Diligent One allows users to analyze and report disparate data from any information source

Diligent announced Diligent One, a platform that provides leadership, boards and practitioners with a single source for all their governance, risk and compliance (GRC) needs. Over the last six months Diligent has launched board and leadership ...

Will today’s security purchases stop tomorrow’s deadliest threats?

Future-proof your investment by determining what business and security initiatives a new tool may be able to support or streamline.  The post Will today’s security purchases stop tomorrow’s deadliest threats? appeared first on ...