Application Security News and Articles


SecurityScorecard unveils Managed Cyber Risk Services to solve the third-party cyber risk puzzle

SecurityScorecard has unveiled new partner-focused Managed Cyber Risk Services designed to help customers of all types and sizes operationalize third-party cyber risk management. With 98% of organizations having a relationship with at least ...

Abnormal Security CheckGPT detects AI-generated email attacks

Abnormal Security announced CheckGPT, a new capability to detect AI-generated email attacks. The new capability determines when email threats, including business email compromise (BEC) and other socially-engineered attacks, have likely been ...

Lessons Learned on Finding a Cybersecurity Job After a Layoff

Steve Winterfeld from Akamai shares his advice and thoughts on searching for a new cybersecurity job after a layoff. The post Lessons Learned on Finding a Cybersecurity Job After a Layoff appeared first on Security Boulevard.

Vectra AI Platform provides real-time attack signal intelligence

Vectra AI has launced the Vectra AI Platform with patented Attack Signal Intelligence to deliver the integrated signal enterprises need to make extended detection and response (XDR) a reality. With the Vectra AI Platform, enterprises can ...

MixMode Invited to Participate on ‘US Blue Team’ in Annual International Cybersecurity Exercise

The constant threats posed by hackers, state-sponsored cyber attacks, and malicious actors have prompted the creation of cutting-edge strategies to fortify our nation’s cyber defenses. One such response to this growing concern comes in the form ...

North Korean hackers breached Russian missile development firm

North Korean state-sponsored hackers have breached Russian missile maker NPO Mashinostroyeniya, according to SentinelLabs researchers. North Korean hackers discovered The researchers came across leaked email communication between NPO ...

Identity-Based Attacks Soared in Past Year: Report

Identity-based attacks have soared in the past year, according to CrowdStrike’s 2023 Threat Hunting Report. The post Identity-Based Attacks Soared in Past Year: Report appeared first on SecurityWeek.

How to integrate security into DevOps | Contrast Security

According to a new report from Gartner titled3 Essential Steps to Enable Security in DevOps,by 2027, DevSecOps practices will be embedded in 85% of product development teams, as opposed to 30% in 2022. The post How to integrate security into ...

NetSPI launches ML/AI Pentesting solution to help organizations build more secure models

NetSPI has debuted its ML/AI Pentesting solution to bring a more holistic and proactive approach to safeguarding machine learning model implementations. The solution focuses on two core components: Identifying, analyzing, and remediating ...

ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products

ICS Patch Tuesday: Siemens releases a dozen advisories covering over 30 vulnerabilities, but Schneider Electric has only published one advisory. The post ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products appeared first on ...

Will SEC Cybersecurity Regulations Make a Difference?

The SEC's rules aim to ensure that Investors evaluating a company can meaningfully assess that company’s cybersecurity standing. The post Will SEC Cybersecurity Regulations Make a Difference? appeared first on Security Boulevard.

Open Raven automates attack prevention and remediation with DDR capabilities

Open Raven announced Data Detection and Response (DDR) capabilities, support for Amazon Redshift, workflow automations, real-time scanning, and AI-enabled asset discovery. These new developments build on existing automated data discovery, ...

Introducing Incydr Flows, powered by Tines: Automations to Reduce Security’s Workload

In today’s economic climate, security teams are under pressure to do more with less. They don’t have enough staff, which makes automation technologies extra critical. According to Tines’ Voice of the SOC Analyst, 66% of analysts believe ...

Developer-first security to prevent downstream risks

Synopsys and Secure Code Warrior partner for developer-first security. The post Developer-first security to prevent downstream risks appeared first on Security Boulevard.

Synopsys and NowSecure join forces

Synopsys + NowSecure partnership delivers automated, continuous MAST solution. The post Synopsys and NowSecure join forces appeared first on Security Boulevard.

SAP Patch Day: August 2023

SAP Patch Day: August 2023 ltabo Tue, 08/08/2023 - 11:47 New HotNews Note for SAP PowerDesigner and Important Update on July HotNews Note Highlights of August SAP Security Notes analysis include: August Summary - Twenty new and updated SAP ...

UK Think Tank Proposes Greater Ransomware Reporting From Cyberinsurance to Government

The Royal United Services Institute (RUSI) examined the relationship between cyberinsurance and ransomware, and proposes greater reporting from victims to government, enforced through insurance policies. The post UK Think Tank Proposes Greater ...

Black Hat Preview: The Business of Cyber Takes Center Stage

The cybersecurity industry heads to Las Vegas this week for Black Hat in a state of economic contraction, confusion and excitement. Can the promise of AI overcome the hype cycle to truly solve security problems? The post Black Hat Preview: The ...

Solvo SecurityGenie helps organizations improve their cloud security posture

Cloud security breaches are a major threat to organizations with an average detection time of 277 days and human error contributing to 85% of Incidents. To address this challenge, Solvo launched SecurityGenie, a prompt-based cloud security ...

ComplyCube ID Liveness Layer combats screen replay attacks

ComplyCube has enhanced its Document Authentication service to counter ‘screen replay attacks’, where scammers attempt to use IDs displayed on digital screens for illicit access to products and services. The announcement arrives in ...