Application Security News and Articles


In Other News: Military Emails Leaked, Google Restricts Internet Access, Chinese Spyware

Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 17, 2023. The post In Other News: Military Emails Leaked, Google Restricts Internet Access, Chinese ...

Russia Seeks 18 Years in Jail for Founder of Cybersecurity Firm

A Russian prosecutor requested an 18-year prison sentence for Ilya Sachkov, founder of cybersecurity firm Group-IB. The post Russia Seeks 18 Years in Jail for Founder of Cybersecurity Firm appeared first on SecurityWeek.

Deloitte expands MXDR solution with new operational technology and identity modules

Deloitte has expanded their MXDR cybersecurity solution to help support some of the unique challenges for enterprise, cloud, and operational technology (OT) security operations center (SOC) delivery, by developing two new modules for identity ...

Google Creates Red Team to Test Attacks Against AI Systems

Google has created a dedicated AI Red Team tasked with carrying out complex technical attacks on artificial intelligence systems. The post Google Creates Red Team to Test Attacks Against AI Systems appeared first on SecurityWeek.

Treat all data as if it’s regulated PII | Contrast Security

Poor, poor Boston Globe.  The post Treat all data as if it’s regulated PII | Contrast Security appeared first on Security Boulevard.

AppViewX joins AWS ISV Accelerate Program to offer a certificate lifecycle management

AppViewX has joined the Amazon Web Services (AWS) Independent Software Vendor (ISV) Accelerate Program, a co-sell program for AWS Partners who provide software solutions that run or integrate with AWS. The program will help AppViewX drive new ...

R.I.P. Kevin Mitnick, 1963–2023

Kevin is Free: Hackers’ hacker dies, aged 59. The post R.I.P. Kevin Mitnick, 1963–2023 appeared first on Security Boulevard.

G-71 launches integration with mail servers to secure email attachments

G-71 launched an extensive integration of its LeaksID solution with all major mail servers. This integration aims to ensure the utmost security of sensitive email attachments and heralds a new era in safeguarding valuable corporate information. ...

Cleantech and Quantum Computing: Critical Infrastructure Cybersecurity

As cleantech becomes a bigger part of U.S. critical infrastructure, it faces a bigger risk from cyberattackers leveraging quantum attacks. The post Cleantech and Quantum Computing: Critical Infrastructure Cybersecurity appeared first on Security ...

Patch the MOVEit file transfer vulnerability now | Contrast Security

Know anything about CL0P,  the ransomware gang connected to an attack on the popular MOVEit Transfer file-transfer platform? The post Patch the MOVEit file transfer vulnerability now | Contrast Security appeared first on Security Boulevard.

North Korean hackers targeted tech companies through JumpCloud and GitHub

North Korean state-sponsored hackers have been linked to two recent cyberattack campaigns: one involving a spear-phishing attack on JumpCloud and the other targeting tech employees on GitHub through a social engineering campaign. The JumpCloud ...

OpenMeetings Flaws Allow Hackers to Hijack Instances, Execute Code on Servers

Three vulnerabilities in Apache OpenMeetings could be exploited by attackers to take over an administrator account and execute arbitrary code remotely. The post OpenMeetings Flaws Allow Hackers to Hijack Instances, Execute Code on Servers ...

The Latest Update to the ReversingLabs A1000 Threat Analysis and Hunting Solution

Our customers rely on ReversingLabs A1000 Threat Analysis and Hunting Solution to provide an instant malware lab, delivering static and dynamic analysis. Here, we break down the newest improvements to this necessary solution. ReversingLabs is ...

The Rise of QR Codes Spurs Rise in ‘Fresh Phish’

Miscreants have ramped up their use of QR codes to phish for credentials, according to INKY threat researchers. The post The Rise of QR Codes Spurs Rise in ‘Fresh Phish’ appeared first on Security Boulevard.

VirusTotal Provides Clarifications on Data Leak Affecting Premium Accounts

VirusTotal has provided clarifications on the recent data leak that resulted in the exposure of information on 5,600 of the threat analysis service’s customers. The post VirusTotal Provides Clarifications on Data Leak Affecting Premium ...

AI and Microdirectives

Imagine a future in which AIs automatically interpret—and enforce—laws. All day and every day, you constantly receive highly personalized instructions for how to comply with the law, sent directly by your government and law enforcement. ...

Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519)

The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the Cybersecurity and Infrastructure Security Agency (CISA). “In June 2023, ...

Tech Titans Promise Watermarks to Expose AI Creations

Amazon, Google, Meta, Microsoft, OpenAI and other tech firms have voluntary agreed to AI safeguards set by the White House. The post Tech Titans Promise Watermarks to Expose AI Creations appeared first on SecurityWeek.

What is SAST & DAST? Difference between SAST & DAST.

SAST and DAST are both security testing methodologies used to identify vulnerabilities and security weaknesses in software applications…Continue reading on Medium »

GitHub Warns of North Korean Social Engineering Attacks Targeting Tech Firm Employees

North Korean hackers are targeting employees at technology firms with repository invitations and malicious NPM packages. The post GitHub Warns of North Korean Social Engineering Attacks Targeting Tech Firm Employees appeared first on SecurityWeek.