Application Security News and Articles


MGM Resorts Confirms ‘Cybersecurity Issue’, Shuts Down Systems

MGM Resorts confirms "cybersecurity incident" led to the shutdown of web sites and IT systems of hotels throughout the United States. The post MGM Resorts Confirms ‘Cybersecurity Issue’, Shuts Down Systems appeared first on SecurityWeek.

Building Compliance from Scratch with a Culture of Security

For managed service providers (MSPs), building a compliance program from the ground up for an organization is a welcome challenge. But doing so without the full buy-in and active involvement of the organization can feel like an uphill battle – ...

US Marks 22 Years Since 9/11 Terrorist Attacks

One organization is hoping to transform the anniversary of 9/11 into a day of doing good. The post US Marks 22 Years Since 9/11 Terrorist Attacks appeared first on SecurityWeek.

Why Cyber Risk Quantification Needs a Trust Makeover?

With this blog, we begin the series dedicated to exploring the nuances of cyber risk quantification. In the fast-evolving world of cybersecurity, trust is both a necessity and a challenge. CISOs routinely come across tools and techniques that ...

Best Practices of Secrets Management with Kubernetes

Unlock the potential of your Kubernetes deployments by mastering the best practices for managing secrets, as today’s recent data breaches prove that robust secret management and security are paramount. Best Practices of Secrets Management with ...

Do you really need to tell FedEx your Social Security number? How to avoid package-delivery scams

Do you order cartons of strawberries, flat-screen TVs, running shoes, and light bulbs online? You're far from alone. Oberlo reported that in 2023, the number of people who shop online rose to 2.64 billion worldwide. That's equal to 33.3% of the ...

‘BLASTPASS’ iPhone Exploit — Apple Asleep at the Switch

Zero click, zero day, zero clue: Yet another iOS zero-day lets NSO’s Pegasus “mercenary spyware” cause chaos. The post ‘BLASTPASS’ iPhone Exploit — Apple Asleep at the Switch appeared first on Security Boulevard.

News Alert: Traceable AI report exposes true scale of API-related data breaches, top challenges

San Francisco, Calif. —Traceable AI, the industry’s leading API security company, today released its comprehensive research report – the 2023 State of API Security: A Global Study on the Reality of API Risk. Despite APIs being critical to ...

Designed to Be Breached – Automated Document Consumption

By David Neuman, Senior Analyst, TAG Cyber The use of automated document consumption and data extraction processes presents the opportunity for greater business efficiency, lower cost of process ownership, positive customer experience, and…wait ...

Insights from Attack and Defense Drills: Strategies and Resilience

Recently, NSFOCUS SOC team summarized the findings from attack and defense drills in the first half of 2023. In these smokeless battles, the attackers advanced with aggressive strategies, while the defenders relied on comprehensive defense ...

Ekran System to Exhibit at it-sa Expo&Congress 2023

Ekran System will participate in the upcoming it-sa Expo&Congress 2023 in Nuremberg, Germany. The event takes place October 10–12, 2023, at the Nuremberg Exhibition Centre. Visit the event to discover cybersecurity products and services ...

A Comprehensive Guide to User Access Review: Best Practices and Pitfalls

In this guide, you will learn how to perform an accurate user access review without succumbing to the common pitfalls. The post A Comprehensive Guide to User Access Review: Best Practices and Pitfalls appeared first on Scytale. The post A ...

Data Breach of AP Stylebook Leads to Phishing Attacks

Users of the AP Stylebook have been targeted in phishing campaigns by bad actors using personal information stolen in a data breach in July. According to the Associated Press, cybercriminals between July 16 and 22 hacked into the database of an ...

After Microsoft and X, Hackers Launch DDoS Attack on Telegram

Anonymous Sudan launches a DDoS attack against Telegram in retaliation for the suspension of their primary account on the platform. The post After Microsoft and X, Hackers Launch DDoS Attack on Telegram appeared first on SecurityWeek.

Fortinet partners with Wiz to help enterprises protect their cloud environments

Fortinet and Wiz announced that Wiz has joined the Fortinet Fabric-Ready Technology Alliance Partner Program and Fortinet has joined the Wiz Integration (WIN) Program. The two companies have jointly developed an integrated solution to help ...

The Small Idea With a Big Impact on the Cybersecurity Talent Gap

The cost of cybercrime is expected to reach $8 trillion globally this year, yet the scarcity of security talent is becoming more pronounced. With more than 750,000 cybersecurity positions unfilled in the U.S. and 3.5 million positions worldwide ...

Bookstore Chain Dymocks Discloses Data Breach Possibly Impacting 800k Customers

The personal information of more than 800,000 individuals was stolen from bookstore chain Dymocks in a cyberattack last week. The post Bookstore Chain Dymocks Discloses Data Breach Possibly Impacting 800k Customers appeared first on SecurityWeek.

From the Internet to the Cloud: A Revolution in Computing and Security

The journey from the early days of the internet to the rise of cloud systems has revolutionized how businesses operate and access computing resources. The post From the Internet to the Cloud: A Revolution in Computing and Security appeared first ...

Holy Macroni! A recipe for progressive language enhancement

By Brent Pappas Despite its use for refactoring and static analysis tooling, Clang has a massive shortcoming: the Clang AST does not provide provenance information about which CPP macro expansions a given AST node is expanded from; nor does it ...

Identity Protection Can’t be Taken for Granted Anymore

The findings in report challenge the implicit trust that the purchase and deployment of an identity security solution equals protection The post Identity Protection Can’t be Taken for Granted Anymore appeared first on Silverfort. The post ...