Application Security News and Articles


Law firms under cyberattack

In April 2023, Australian law firm HWL Ebsworth was hit by a cyberattack that possibly resulted in data of hundreds of its clients and dozens of government agencies being compromised. The attack was claimed by the Russian-linked ALPHV/Blackcat ...

Overcoming user resistance to passwordless authentication

Many organizations agree in theory that passwordless authentication is the future, but getting there represents a significant change management challenge. The migration to passwordless requires forethought and planning. For example, an ...

Meta’s Threads and Your Privacy, Airline Reservation Scams, IDOR Srikes Back

In this episode, we explore the rise of Threads, a new social media app developed by Meta, which has already attracted 10 million users in just seven hours. However, there’s a catch – the app collects extensive personal data, sparking ...

Number of email-based phishing attacks surges 464%

The evolving cyberattack landscape reveals the increasing utilization of generative artificial intelligence (AI) systems, like ChatGPT, by cybercriminals for crafting malicious content and executing sophisticated attacks, according to Acronis. ...

Meet the Keyfactor Team: Five Questions with Ellen Kindley, Chief Transformation Officer

This month, we sat down with Ellen Kindley, Keyfactor’s Chief Transformation Officer, to discuss how her team is creating impactful change across the organization. The post Meet the Keyfactor Team: Five Questions with Ellen Kindley, Chief ...

New disturbing ransomware trend threatens organizations

Ransomware attacks increased by over 37% in 2023 compared to the previous year, with the average enterprise ransom payment exceeding $100,000, with a $5.3 million average demand, according to Zscaler. Since April 2022, ThreatLabz has identified ...

BSides Knoxville 2023 – Reanna Schultz – Social Engineering: Training The Human Firewall

Our thanks to BSides Knoxville for publishing their presenter’s outstanding BSides Knoxville 2023 content on the organizations’ YouTube channel. Permalink The post BSides Knoxville 2023 – Reanna Schultz – Social Engineering: ...

New R Package For HTTP Headers Hashing

HTTP Headers Hashing (HHHash) is a technique developed by Alexandre Dulaunoy to generate a fingerprint of an HTTP server based on the headers it returns. It employs one-way hashing to generate a hash value from the list of header keys returned by ...

How to Combat Misinformation in the Age of AI

Fake news, misinformation and online scams are growing at an alarming rate as generative AI explodes in usage. So what are the problems, and what are some potential solutions to consider? The post How to Combat Misinformation in the Age of AI ...

Week in review: Fileless attacks increase 1,400%, consumers ditch brands hit by ransomware

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Island Enterprise Browser: Intelligent security built into the browsing session In this Help Net Security interview, Mike Fey, CEO of Island, ...

BSides Knoxville 2023 – Rob Fry – Security As A Video Game

Our thanks to BSides Knoxville for publishing their presenter’s outstanding BSides Knoxville 2023 content on the organizations’ YouTube channel. Permalink The post BSides Knoxville 2023 – Rob Fry – Security As A Video Game ...

Cloud Chronicles: Unlocking the Secrets of Solvo

Unlocking the Potential:   ​​For organizations leveraging cloud services to facilitate business growth, it is vital to have a comprehensive and up-to-date understanding of identities and access privileges. In a dynamic cloud environment, ...

MalCare Releases Plugin Update with Improved Authentication Systems

Recently, a vulnerability in the MalCare plugin was disclosed to our team by a security researcher. We responded to the security researcher, after conducting our due diligence.  In the rare situation, where a site has a pre-existing, high ...

Discover Sift’s latest fraud data, insights from Money20/20, and G2 awards

Stay up to date with the latest news from Sift, including key insights from its Q2 2023 Digital Trust & Safety Index. Read the blog to learn more. The post Discover Sift’s latest fraud data, insights from Money20/20, and G2 awards appeared ...

Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014

When the marital infidelity website AshleyMadison.com learned in July 2015 that hackers were threatening to publish data stolen from 37 million users, the company’s then-CEO Noel Biderman was quick to point the finger at an unnamed former ...

Improving the SOC Analyst Experience

It’s essential to continuously improve the analyst experience (AX) and maximize the team’s efficiency when protecting the organization. Focusing on what matter the most to security analysts and making their job easier can also reduce burnout ...

BSides Knoxville 2023 – Travis Goodspeed – Writing a Mask ROM Tool

Our thanks to BSides Knoxville for publishing their presenter’s outstanding BSides Knoxville 2023 content on the organizations’ YouTube channel. Permalink The post BSides Knoxville 2023 – Travis Goodspeed – Writing a Mask ROM ...

SafeBreach Coverage for US-CERT Alert (AA23-187A) – Truebot Malware

LockBit was the most deployed ransomware variant in the world in 2022 and continues to be prolifically used in 2023. Threat actors leveraging LockBit ransomware variants have targeted organizations of all sizes in various critical infrastructure ...

Poor Dude’s Janky Bluesky Feed Reader CLI Via R & Python

Lynn (of TITAA and general NLP wizardy fame) was gracious enough to lend me a Bluesky invite, so I could claim my handle on yet-another social media site. I’m still wary of it (as noted in one of this week’s Drops), but the AT protocol ...

CommitStrip ‘Only The Penitent Coder Will Pass’

via the textual amusements of Thomas Gx, along with the Illustration talents of Etienne Issartia and superb translation skillset of Mark Nightingale - the creators of CommitStrip! Permalink The post CommitStrip ‘Only The Penitent Coder Will ...