Application Security News and Articles


Microsoft Teams vulnerability allows attackers to deliver malware to employees

Security researchers have uncovered a bug that could allow attackers to deliver malware directly into employees’ Microsoft Teams inbox. “Organisations that use Microsoft Teams inherit Microsoft’s default configuration which allows ...

Celerium Compromise Defender detects and disrupts cyber compromise activity

Celerium released its latest cybersecurity solution, Compromise Defender. As an integral part of Celerium’s Cyber Defense Network , this innovative solution combines rapid implementation and automation to provide early detection and defense ...

The Journey to a Scalable Software Maturity Model

The Purple Book Community S3M2 is a framework designed to help organizations assess and improve their software security practices. The post The Journey to a Scalable Software Maturity Model appeared first on Security Boulevard.

2.5M Genworth Policyholders and 769K Retired California Workers and Beneficiaries Affected by Hack

MOVEit hack: Personal information of about 769,000 retired California employees and 2.5 million Genworth Financial policyholders were exposed. The post 2.5M Genworth Policyholders and 769K Retired California Workers and Beneficiaries Affected by ...

How to Fix “pr_connect_reset_error” in Firefox

5 Simple Methods to Resolve “pr_connect_reset_error” The “pr_connect_reset_error” is an… Continue reading How to Fix “pr_connect_reset_error” in Firefox The post How to Fix “pr_connect_reset_error” in Firefox appeared first on ...

Aviatrix appoints Doug Merritt as Chairman, CEO, and President

Aviatrix announced the appointment of Doug Merritt as CEO and President. He will also join the Aviatrix Board of Directors as Chairman. Merritt will succeed Steve Mullaney, who for the past four years has built Aviatrix into an industry-defining ...

SAST — Security Scan with AquaSec Trivy

Trivy, developed by AquaSec, is a powerful and comprehensive open-source vulnerability scanner designed specifically for containers and…Continue reading on Medium »

Prevent supply chain attacks with access governance

Top 5 ways access governance prevents supply chain attacksIn today's interconnected digital landscape, organizations rely heavily on their supply chains to deliver products, services, and software solutions. However, this increasing dependence on ...

Zero Trust Security Guide for the Digital Enterprise

Zero Trust Security Guide for the Digital EnterpriseThe growing severity and frequency of data breaches and cyberattacks expose the reality that current security strategies are ineffective in combatting modern cyber threats.In an era of ...

Operationalizing zero trust in the cloud

Some organizations have bought into the idea that workloads in the cloud are inherently more secure than those on premises. This idea is reinforced by the concept that the cloud service provider (CSP) assumes responsibility for security. However, ...

New infosec products of the week: June 23, 2023

Here’s a look at the most interesting products from the past week, featuring releases from Cymulate, Edgescan, ESET, iStorage, and Netskope. iStorage launches datAshur PRO+C with Type-C USB interface iStorage’s new datAshur PRO+C is a ...

Security investments that help companies navigate the macroeconomic climate

As data transformation progresses, cyber attacks are among the most significant growing threats to the enterprise. As seen in the recent MOVEit situation, enterprises must immediately enact cybersecurity solutions that are right for them. Every ...

Insurance companies neglect basic email security

Only 3.54% of of insurance companies have correctly implemented basic phishing and spoofing protection, according to EasyDMARC. DMARC standard adoption Insurers operate using highly sensitive, private information that they’ve been trusted by ...

Product Update | NEW! CIPA Content Filter by ManagedMethods

Content Filter provides districts with easy, affordable CIPA compliance for E-Rate You asked and we listened! Content Filter is a cloud-based web content filter that empowers districts to easily control the types of online media students can ...

Understanding Fortify: Strengthening Your Applications’ Security

In an era where cyber threats and data breaches are becoming increasingly common, ensuring the security of your applications is of…Continue reading on System Weakness »

What we know about the MOVEit exploit and ransomware attacks

The Clop ransomware group has created the MOVEit exploit using a zero-day vulnerability in third-party file transfer software MOVEit Transfer. The post What we know about the MOVEit exploit and ransomware attacks appeared first on Security Boulevard.

What is Tier Zero — Part 1

What is Tier Zero — Part 1 Tier Zero is a crucial group of assets in Active Directory (AD) and Azure. Its purpose is to protect the most critical components by creating a security boundary and preventing a complete compromise. Defining ...

SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

The United Parcel Service (UPS) says fraudsters have been harvesting phone numbers and other information from its online shipment tracking tool in Canada to send highly targeted SMS phishing (a.k.a. "smishing") messages that spoofed UPS and other ...

Survey Surfaces Multiple Cloud Security Contradictions

A survey of 500 security, IT and engineering professionals published today found that nearly half (49%) experienced a data breach resulting from unauthorized access to a cloud computing environment. A full 80% said they felt that their existing ...

BSidesSF 2023 – Erin Barry – Security Hiring Trends

Our thanks to BSidesSF for publishing their presenter’s superlative BSidesSF 2023 content on the organizations’ YouTube channel. Permalink The post BSidesSF 2023 – Erin Barry – Security Hiring Trends appeared first on Security ...