Application Security News and Articles


Adapting authentication to a cloud-centric landscape

In this Help Net Security interview, Florian Forster, CEO at Zitadel, discusses the challenges CISOs face in managing authentication across increasingly distributed and remote workforces, the negative consequences of ineffective authorization, ...

What true diversity in the cybersecurity industry looks like

In this Help Net Security video, Larry Whiteside, Jr., CISO at RegScale and President of Cyversity, discusses how, now more than ever, the cybersecurity industry needs the diversity of thought to address the increasingly complex and ...

Back to School Cybersecurity, Phishing Pitfalls and Strategies, X’s (Twitter) Blocking Overhaul

In this episode, we discuss essential cybersecurity tips for students and educational institutions as they gear up for the school season. From software updates to strong passwords and cybersecurity education, we explore how students and schools ...

Experts demand clarity as they struggle with cloud security prioritization

Cloud Native Application Protection Platforms (CNAPPs) have emerged as a critical category of security tooling in recent years due to the complexity of comprehensively securing multi-cloud environments, according to Cloud Security Alliance. ...

Customizing LLMs for domain-specific tasks

The expansion of large language models (LLMs) in recent times has brought about a revolutionary change in machine learning processes and has introduced fresh perspectives on the potential of AI, according to Predibase. Based on survey data from ...

Beyond Cybersecurity Compliance: Adhering to Regulation is Not Enough

Achieving cybersecurity compliance is a top priority, yet can’t guarantee positive outcomes by simply checking compliance boxes The post Beyond Cybersecurity Compliance: Adhering to Regulation is Not Enough appeared first on Security Boulevard.

Cloud Repatriation: The Unforeseen Reversal in Cloud Computing Trends

As cloud computing continues to evolve, an intriguing new trend is emerging – cloud repatriation. This concept, also known as cloud reversal, cloud exit or the "cloud boomerang effect", entails moving applications or data from a public cloud ...

BSides Cheltenham 2023 – Simon Gurney – Making Your Own Cool Conference Badges!

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Cheltenham 2023 – Simon Gurney – Making Your ...

What’s New in the NIST Cybersecurity Framework 2.0 Draft?

NIST has released a draft version 2.0 of the Cybersecurity Framework. Here’s what you need to know and how to get your recommendations included. The post What’s New in the NIST Cybersecurity Framework 2.0 Draft? appeared first on Security ...

Week in review: Security Onion 2.4 released, WinRAR vulnerable to RCE

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Network detection and response in the modern era In this Help Net Security interview, David Gugelmann, CEO at Exeon, sheds light on the current ...

BSides Cheltenham 2023 – James Bore – Reserving The Right To Be Wrong

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Cheltenham 2023 – James Bore – Reserving The ...

2023 OWASP Top-10 Series: API5:2023 Broken Function Level Authorization

Welcome to the 6th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API5:2023 Broken Function Level Authorization. In this series we are taking an ...

The Stealthy Threat: Unveiling the Dangers of Cookie Capture

In the vast realm of cyber threats, where hackers and cybercriminals are constantly honing their skills, one danger that often flies under the radar is cookie capture. Cookies, those innocuous-looking bits of data stored on your computer, play a ...

BSides Cheltenham 2023 – Cristian Cornea – Bypassing Anti-Virus Using BadUSB

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Cheltenham 2023 – Cristian Cornea – ...

Limiting User Queries in SQL Server

Why Limit User Queries? We often run into customers wondering how to limit user queries in SQL Server. The motivation for needing to limit queries … The post Limiting User Queries in SQL Server appeared first on Cyral. The post Limiting User ...

Kroll Employee SIM-Swapped for Crypto Investor Data

Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy ...

Daniel Stori’s ‘Python Robots’

via the webcomic talent of the inimitable Daniel Stori at Turnoff.US. Permalink The post Daniel Stori’s ‘Python Robots’ appeared first on Security Boulevard.

Perceptions, SaaS Identities and AI

Learn 3 key takeaways from Black Hat 2023 on cybersecurity perceptions, SaaS identities, and securing AI and LLMs. The post Perceptions, SaaS Identities and AI appeared first on AppOmni. The post Perceptions, SaaS Identities and AI appeared first ...

API Abuse – Lessons from the Duolingo Data Scraping Attack

It’s been reported that 2.6 million user records sourced from the Duolingo app are for sale. The attacker apparently obtained them from an open API provided by the company. There’s a more technical explanation available here.  While we talk ...

NIST CSF 2.0: The Journey so Far and What’s Ahead

NIST CSF 1.1 to 2.0 is a significant update reflecting an inclusive and responsive approach to risk management. The most recent public draft of NIST CSF 2.0 includes expanded guidance and adds a sixth function, ‘Govern,’ to aid organizations ...