Application Security News and Articles


Cybersecurity Snapshot: New Standard for AI System Security Published, While Study Finds Cyber Teams Boost Value of Business Projects

Check out ETSI’s new global standard for securing AI systems and models. Plus, learn how CISOs and their teams add significant value to orgs’ major initiatives. In addition, discover what webinar attendees told Tenable about their cloud ...

Zscaler Moves to Acquire Red Canary MDR Service

Zscaler this week revealed it is acquiring Red Canary, a provider of a managed detection and response (MDR) service that will be incorporated into the portfolio of offerings delivered via a zero-trust cloud platform for accessing ...

Top Cloud Vulnerabilities in Fintech and How to Fix Them

For financial technology (FinTech) organizations, cloud security is both a top priority and a significant concern, as highlighted by a study conducted by McKinsey and the Institute of International Finance (IIF). FinTech companies increasingly ...

Strategies for Enhancing Your Organization’s Cyber Resilience

Organizations must improve their cyber resilience – not just for the sake of business operations, but to maintain customer confidence.   The post Strategies for Enhancing Your Organization’s Cyber Resilience appeared first on Security Boulevard.

Chinese Hacking Group APT41 Exploits Google Calendar to Target Governments

China-linked hackers used a compromised government site to target other government entities with the ToughProgress malware that uses an attacker-controlled Google Calendar for C&C. The post Chinese Hacking Group APT41 Exploits Google ...

Why Take9 Won’t Improve Cybersecurity

There’s a new cybersecurity awareness campaign: Take9. The idea is that people—you, me, everyone—should just pause for nine seconds and think more about the link they are planning to click on, the file they are planning to download, or ...

MITRE Publishes Post-Quantum Cryptography Migration Roadmap

The roadmap provides an overview of four key stages of the migration process, namely preparation, baseline understanding, planning and execution, and monitoring and evaluation. The post MITRE Publishes Post-Quantum Cryptography Migration Roadmap ...

Moving On Has Never Been So Simple: MSPs & ICES Solutions (Part 3)

Every tech stack has its "we need to talk" moment, and for most MSPs, it comes right after your SEG lets a phish waltz into a client’s inbox like it owns the place. If you’re reading this, chances are you’ve had that moment. Whether it was ...

ConnectWise Discloses Suspected State-Sponsored Hack

The IT software provider says ScreenConnect users were impacted by the attack, which exploited a high-severity ASP.NET vulnerability. The post ConnectWise Discloses Suspected State-Sponsored Hack appeared first on SecurityWeek.

CISA Releases Guidance on SIEM and SOAR Implementation

The guidance outlines the benefits and challenges or SIEM and SOAR platforms, and shares implementation recommendations. The post CISA Releases Guidance on SIEM and SOAR Implementation appeared first on SecurityWeek.

From Swipe to Scare: Data Privacy and Cyber Security Concerns in Dating Apps

Dating apps changed everything; didn’t they? They’ve truly revolutionised how we discover love and make connections. Consider this: over 323 million people worldwide use them—millions swiping, matching, and meeting. But there’s a catch ...

Why privacy in blockchain must start with open source

Traditionally, trust came from centralized institutions. Banks, payment networks, and clearinghouses are closed systems. Users cannot see the inner workings, but they rely on external audits, government regulation, and long histories of ...

Using AI to outsmart AI-driven phishing scams

Phishing scams used to be filled with awkward wording and obvious grammar mistakes. Not anymore. AI is now making it harder to distinguish what is real. According to Cofense, email-based scams surged 70% year over year, driven by AI’s ability ...

AI agents have access to key data across the enterprise

82% of organizations already use AI agents, but only 44% of organizations report having policies in place to secure them, according to SailPoint. While 53% are in the process of developing such policies, the reality is that most remain exposed ...

Exchange 2016, 2019 support ends soon: What IT should do to stay secure

Microsoft is ending support for Exchange Server 2016, Exchange Server 2019, and Outlook 2016 on October 14, 2025. That date might seem far off, but if you’re managing email systems or Office deployments, it’s worth paying attention to now. ...

Infosec products of the month: May 2025

Here’s a look at the most interesting products from the past month, featuring releases from: Anchore, BalkanID, Cyble, groundcover, Hunted Labs, LogicGate, McAfee, Obsidian Security, Outpost24, PentestPad, ProcessUnity, Resecurity, Searchlight ...

Evaluating the Security Efficacy of Web Application Firewalls (WAFs)

Web Application Firewalls (WAFs) are now a staple in defending web-facing applications and APIs, acting as specialized filters to block malicious traffic before it ever reaches your systems. But simply deploying a WAF isn’t enough, the real ...

Feel Supported by Your NHI Security Team

Have You Considered the Strategic Importance of NHI Management? Consider this: The evolving technology has caused a seismic shift in how businesses protect their IT infrastructure. A crucial part of this protection is the effective management of ...

Unlocking Powerful Benefits with NHIs

Is Your Organization Realizing the Powerful Benefits of NHIs? Acquiring a deep understanding of Non-Human Identities (NHIs) is pivotal for organizations striving to build solid fortifications around their data and systems. NHIs, also known as ...

Building Trust Through Effective NHI Management

Why is Trust Crucial in NHI Management? Think about it. How much faith do we place in Non-Human Identities (NHIs) that aid in modern cybersecurity protocols? Is that trust well-founded? The role of trust in NHI management becomes key as we rely ...