Application Security News and Articles


Lapsus$ Jury Says Teen Duo Did Do Crimes

Arion Kurtaj and anon minor: Part of group that hacked Uber, Nvidia, Microsoft, Rockstar Games and many more. The post Lapsus$ Jury Says Teen Duo Did Do Crimes appeared first on Security Boulevard.

Randall Munroe’s XKCD ‘Pronunciation’

via the comic artistry and dry wit of Randall Munroe, maker of XKCD! Permalink The post Randall Munroe’s XKCD ‘Pronunciation’ appeared first on Security Boulevard.

What is ARMOR Foundational Visibility? Level 1 of The ARMOR Assessment Explained

The post What is ARMOR Foundational Visibility? Level 1 of The ARMOR Assessment Explained appeared first on Low-Code Security Automation & SOAR Platform | Swimlane. The post What is ARMOR Foundational Visibility? Level 1 of The ARMOR ...

Founders of Crypto Mixer Tornado Cash Indicted for Laundering $1 Billion

The U.S. government is taking a big swing at two founders of the Tornado Cash cryptocurrency mixer that allegedly laundered more than $1 billion in criminal proceeds from cyberthreat actors that include the notorious Lazarus Group. The Department ...

NETGEAR launches PR60X Pro Router

NETGEAR has launched the NETGEAR 10G/Multi-Gigabit Dual WAN Pro Router (PR60X) making it the latest addition to their total networking solution platform, Insight. NETGEAR’s line of Smart Switches, Pro WiFi Access Points, Insight cloud-based ...

NIST Cybersecurity Framework 2.0 Highlights Supply Chain Security

Since its release in 2014, the NIST Cybersecurity Framework (CSF) has been adopted by organizations worldwide and across industries. But a lot has changed in that period. NIST gathered input about how the CSF should evolve, and this month ...

LinkedIn Fakes: The Rise of Spoof Profiles Threatening Brand Reputation

Last year set a new record for fake profiles removed from the LinkedIn platform. This shows that fraudsters are dedicating more time and effort to scams… The post LinkedIn Fakes: The Rise of Spoof Profiles Threatening Brand Reputation appeared ...

What Not to Monitor and What Not to Alert On in Kubernetes

Kubernetes, the de-facto container orchestrator, offers considerable flexibility and power. But monitoring every single thing in Kubernetes can become overwhelming quickly! What should you focus on, and what can you leave alone? In an earlier ...

Kingston IronKey Keypad 200C hardware-encrypted USB Type-C drive released

Kingston Digital Europe has launched the Kingston IronKey Keypad 200C, a hardware-encrypted USB Type-C drive that ensures both security and convenience at your fingertips. Now, users can achieve seamless data protection and effortless ...

TransUnion Report Highlights Increasing Risk from Synthetic Identity Fraud

A new and unsettling threat has emerged on the financial horizon: synthetic identity fraud. TransUnion released its “Omnichannel Fraud in H1 2023” report today, which reveals that this modern method of deceit is growing at an unprecedented ...

Danish Hosting Firms Lose All Customer Data in Ransomware Attack

Two Danish enterprise cloud hosting companies lost all of their customers’ data and had to shut down their servers in the wake of devastating ransomware attacks earlier this month. CloudNordic and Azero, both owned by Certiqa Holding, said in ...

Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks

Cisco has released patches for three high-severity vulnerabilities in NX-OS and FXOS software that could lead to denial-of-service (DoS) conditions. The post Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks appeared first ...

Mysterious Malware Uses Wi-Fi Scanning to Get Location of Infected Device

Mysterious Whiffy Recon malware scans for nearby Wi-Fi access points to obtain the location of the infected device. The post Mysterious Malware Uses Wi-Fi Scanning to Get Location of Infected Device appeared first on SecurityWeek.

Cybersecurity for traffic and transportation systems: What can we learn from NERC CIP and IMO?

 From traffic operations centers and Advanced Traffic Management Systems (ATMS) to field signal cabinets and traffic control devices, transportation systems use digital and automated components to manage physical processes—the flow and control ...

Mind the Gap: Navigating the security data network

At the heart of what we do at Noetic is security data. We aggregate data from existing security and IT management tools to highlight security coverage, provide context to the incident response team, correct control drift and more. This is the ...

Talon unveils digital experience capabilities, equipping IT teams with advanced metrics

Talon Cyber Security has released new digital experience capabilities available in the Talon Enterprise Browser. The capabilities arm IT teams with advanced metrics on device, application, and network performance to ensure that issues can be ...

Exploring the SEC’s New Cybersecurity Risk Management and Incident Disclosure Rules (Part 2)

Navigating the SEC's Cybersecurity Rules and the Crucial Role of Integrity in Cybersecurity Threats and Incidents (Part 2 of 4) As cyber threats grow in sophistication and frequency, regulators are stepping up their efforts to ensure that ...

CSPM vs. DSPM – Why Not Both? | Eureka Security

CSPM and DSPM solutions identify new resources created in the cloud, alert on misconfigurations, and work seamlessly in multi-cloud setups without needing agents, that’s where the similarities end. | Eureka Security The post CSPM vs. DSPM ...

Cloud hosting firms hit by devastating ransomware attack

Danish cloud hosting firms CloudNordic and Azero – both owned by Certiqa Holding – have suffered a ransomware attack that resulted in most customer data being stolen and systems and servers rendered inaccessible. The CloudNordic and ...

FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective

The FBI says that the patches Barracuda released in May for an exploited ESG zero-day vulnerability (CVE-2023-2868) were not effective. The post FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective appeared first on SecurityWeek.