Application Security News and Articles


Navigating the Digital Landscape: A Guide for Young People on Managing Their Online Identities

Your online identity is precious, and protecting it should be your top priority. Discover practical strategies to safeguard your personal information and maintain control over your digital presence The post Navigating the Digital Landscape: A ...

Flaw in Revolut payment systems exploited to steal $20 million

Organized criminal groups exploited a flaw in Revolut’s payment systems and made off with $20+ million of the company’s money, the Financial Times reported on Sunday, citing people with knowledge of the situation. Revolut’s ...

Employee Spotlight – Joseph Pike

We spoke to Security Analyst, Joseph Pike For this month’s employee spotlight piece, we spoke to Security Analyst and heavy metal enthusiast, Joseph Pike. How long have you been working at SE Labs? I’ve been working at SE Labs for over 3 ...

A Cybersecurity Wish List Ahead of NATO Summit

Assuming NATO can play a greater part in the cybersecurity of its members, possibly through a more formal NATO Cyber Command, the question then becomes ‘what should we hope for?’ The post A Cybersecurity Wish List Ahead of NATO Summit ...

Honeywell acquires SCADAfence to strengthen its OT cybersecurity portfolio

Honeywell has agreed to acquire SCADAfence, a provider of OT and IoT cybersecurity solutions for monitoring large-scale networks. SCADAfence brings proven capabilities in asset discovery, threat detection and security governance which are key to ...

Advanced Endpoint Protection (AEP): What Are the Options?

Advanced endpoint protection, often referred to as AEP, is a comprehensive cybersecurity solution designed to protect an organization’s endpoints, such as desktops, laptops and mobile devices, from various types of cybersecurity threats. ...

Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence

Industrial giant Honeywell wants to extend its OT cybersecurity portfolio with the acquisition of Israel-based OT/IoT security firm SCADAfence. The post Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence appeared first on ...

lockr Connections Hub blocks machine-generated emails

lockr launched Connections Hub to verify the authenticity of first-party datasets. Connections Hub expands lockr’s partnerships with publisher-focused data platforms such as CDPs and Clean Rooms, allowing publishers to easily assess and ...

Finding the Right Tools for Response and Visibility in the SOC

One of the more difficult tasks for a cybersecurity professional—from the CISO to the person responsible for log management in the SOC—is to convey the importance of security, compliance and governance to those within the company who aren’t ...

Enhancing Financial Sector Security: IBM Cloud Security & Compliance Center and CyberSaint Collaborate to Streamline 3rd and 4th Party Risk Management

We are thrilled to announce a strategic integration between IBM Cloud Security & Compliance Center and CyberSaint, aimed at empowering enterprises in the financial sector with real-time insights and actionable measures to mitigate risks ...

Third-party risk management survey: Prioritize end-to-end software supply chain security — or fail

Awareness of the risks posed by third-party vendors is high among organizations across industries, but visibility into those webs of business connections remains low, a survey released by a provider of third-party risk management services has ...

Crafting a Successful Cybersecurity Risk Management Strategy

In a world where cyber risks lurk in the dark shadows of our networks, one thing is crystal clear. You need a cybersecurity risk management strategy in place to better understand your risk exposure. While few will question the importance of risk ...

PoC Exploit Published for Recent Ubiquiti EdgeRouter Vulnerability

PoC exploit has been published for a recently patched Ubiquiti EdgeRouter vulnerability leading to arbitrary code execution. The post PoC Exploit Published for Recent Ubiquiti EdgeRouter Vulnerability appeared first on SecurityWeek.

Malware delivery to Microsoft Teams users made easy

A tool that automates the delivery of malware from external attackers to target employees’ Microsoft Teams inbox has been released. TeamsPhisher (Source: Alex Reid) About the exploited vulnerability As noted by Jumpsec researchers Max Corbridge ...

Critical Vulnerability Can Allow Takeover of Mastodon Servers

A critical vulnerability in the Mastodon social networking platform may allow attackers to take over target servers. The post Critical Vulnerability Can Allow Takeover of Mastodon Servers appeared first on SecurityWeek.

PKI for Enterprise Businesses: The Why and How

Ensuring secure online access and transactions is critical in today's digital business environment. Enterprise businesses must implement the right technologies and procedures to build trust and protect their data. The good news is that you don't ...

MY TAKE: ‘IOWN’ makes the business case for fostering diversity, respecting individual privacy

To tap the full potential of massively interconnected, fully interoperable digital systems we must solve privacy and cybersecurity, to be sure. Related: Using ‘Big Data’ to improve health and well-being But there’s yet another towering ...

The Biggest Data Breach in Australian History: An awakening for Organizations

The biggest data breach in 2023 so far was at Latitude Financial, an Australian financial services company. The breach, discovered in March 2023, exposed the personal information of more than 14 million customers, including their names, ...

How Does a Hardware Security Module Safeguard Payment Card Data?

Best Practices for Deploying HSMs in Payment Card Environments A… Continue reading How Does a Hardware Security Module Safeguard Payment Card Data? The post How Does a Hardware Security Module Safeguard Payment Card Data? appeared first on ...

Guide to Building a Cybersecurity Incident Response Plan [Part 1]

Cybersecurity incidents are a fact of life in today’s digital world. Every day, organizations of all sizes are targeted by hackers and other cyber criminals. In 2022, there were over 600 billion cyberattacks worldwide, and the number is only ...