Application Security News and Articles


Hubble Aurora empowers businesses to gain insights into their technology ecosystems

Hubble announced its next-generation Technology Asset Visibility and Cybersecurity Posture Management Platform, Aurora. Aurora builds on the foundation of Hubble’s existing Asset Intelligence platform, providing users with asset visibility ...

Safe Security Acquires RiskLens to Become Undisputed Leader in the $4B Cyber Risk Quantification and Management (CRQM) Market

Powerful combination of SAFE Platform’s industry defining AI capabilities coupled with the industry standard FAIR model for cyber risk quantification, that was pioneered by RiskLens, gives enterprises a one-stop-shop to address all their cyber ...

IronNet appoints Linda Zecher as CEO

IronNet’s Board of Directors has appointed Linda Zecher as Chief Executive Officer (CEO) effective immediately. Cameron Pforr, the company’s current Chief Financial Officer (CFO), has been appointed President of IronNet. GEN (Ret.) Keith ...

Concerns About Infostealer Malware on the Rise

A SpyCloud report found more than half of respondents are extremely concerned about their ability to thwart attacks that exfiltrate authentication data. The post Concerns About Infostealer Malware on the Rise appeared first on Security Boulevard.

Citrix Patches Critical Vulnerability in Secure Access Client for Ubuntu

Citrix has patched a critical-severity vulnerability in Secure Access client for Ubuntu that could lead to remote code execution (RCE). The post Citrix Patches Critical Vulnerability in Secure Access Client for Ubuntu appeared first on SecurityWeek.

Cybersecurity Needs to Mitigate Complexity

Complexity is the enemy of security. Akamai’s Steve Winterfeld explains what to do to combat complexity in cybersecurity. The post Cybersecurity Needs to Mitigate Complexity appeared first on Security Boulevard.

IDrive introduces Google Shared Drive backup

IDrive Backup announced the introduction of Google Shared Drive backup, which automatically detects and backs up all the shared drives available to the Super Administrator of the Google Workspace account. Shared drives, which are special folders ...

Have You Been Pwned? – What is it and how to prevent it

If you have been pwned - this is what you should do next! Fight email compromise with the following easy methods. The post Have You Been Pwned? – What is it and how to prevent it appeared first on Security Boulevard.

Same code, different ransomware? Leaks kick-start myriad of new variants

Threat landscape trends demonstrate the impressive flexibility of cybercriminals as they continually seek out fresh methods of attack, including exploiting vulnerabilities, gaining unauthorized access, compromising sensitive information, and ...

Fortinet Patches Critical FortiOS Vulnerability Leading to Remote Code Execution

Fortinet patches a critical-severity vulnerability in FortiOS and FortiProxy that could lead to remote code execution. The post Fortinet Patches Critical FortiOS Vulnerability Leading to Remote Code Execution appeared first on SecurityWeek.

Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals

Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals. The post Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals appeared first on SecurityWeek.

MOVEit: Testing the Limits of Supply Chain Security

The need for cyber resilience arises from the growing realization that traditional security measures are no longer enough to protect systems, data, and the network from compromise. The post MOVEit: Testing the Limits of Supply Chain Security ...

What we told the CFTC about crypto threats

Dan Guido, CEO In March, I joined the Commodity Futures Trading Commission’s Technology Advisory Committee (TAC), helping the regulatory agency navigate the complexities of cybersecurity risks, particularly in emerging technologies like AI and ...

CycloneDX 1.5: The next big step for SBOMs and software transparency

CycloneDX is one of the most popular standards for describing the components of an application, including source code, binaries, libraries, and containers. With the latest release of the specification, version 1.5, OWASP, the manager of the ...

Chinese hackers forged authentication tokens to breach government emails

Sophisticated hackers have accessed email accounts of organizations and government agencies via authentication tokens they forged by using an acquired Microsoft account (MSA) consumer signing key, the company has revealed on Tuesday. “The ...

10 Best Practices For Continuous Compliance When Managing Digital Certificates

It is not enough to claim you are secure; you must also be able to demonstrate your commitment towards keeping your infrastructures and your customers’ information safe. Prioritizing compliance is how you do it. On May 22nd this year, the Irish ...

ARMO named in Gartner® Cool Vendors™

We are excited and honored to announce that we were selected as Gartner Cool Vendor in Platform Engineering for Application Security! Read all about it! The post ARMO named in Gartner® Cool Vendors™ appeared first on ARMO. The post ARMO named ...

SAP Patches Critical Vulnerability in ECC and S/4HANA Products

SAP on July 2023 Security Patch Day released 16 new security notes, including one addressing a critical vulnerability in ECC and S/4HANA (IS-OIL). The post SAP Patches Critical Vulnerability in ECC and S/4HANA Products appeared first on SecurityWeek.

Staying ahead of the “professionals”: The service-oriented ransomware crime industry

Ransomware has been a hugely profitable industry for criminal gangs for the last few years. The total amount of ransom paid since 2020 is estimated to be at least $2 billion, and this has both motivated and enabled the groups who are profiting ...

How Google Cloud’s AML AI redefines the fight against money laundering

Google Cloud’s AML AI represents an advancement in the fight against money laundering. By replacing outdated transaction monitoring systems and embracing AI technology, financial institutions can now stay ahead of evolving financial crime ...