Application Security News and Articles


Product focus: Policies

In the fight against online fraud and abuse, we believe that the strategic advantage lies in flexibility and adaptability. Castle Policies is designed to be the backbone in implementing this strategy, and this is why we've been working on ...

AI may not Destroy the World, but There are Other Risks

For some, AI is the stuff of nightmares. Whether it’s Hal refusing to open the pod bay doors in 2001: A Space Odyssey or the wild thought experiment of Roko’s Basilisk—or even way back to (retellings of) Frankenstein’s monster or the ...

Fortinet Discreetly Patches CVE-2023-27997, a Known Exploited Vulnerability

According to Fortinet, 110 vulnerabilities affecting Fortinet software were announced since the beginning of 2023. On June 8th, security fixes were released in FortiOS firmware versions 6.0.17, 6.2.15, 6.4.13, 7.0.12, and 7.2.5. Interestingly, no ...

Online tracking threats to individuals and organizations

The post Online tracking threats to individuals and organizations appeared first on Click Armor. The post Online tracking threats to individuals and organizations appeared first on Security Boulevard.

In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act

Cybersecurity news that you may have missed this week: Bug bounties for Linux kernel exploits, Cybersecurity Awareness Act, FBI data on BEC losses.  The post In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act ...

Keeping Up with FedRAMP: Baseline Updates, Inaugural Members of the FSCAC, and More

In the words of Winston Churchill, “To improve is to change; to be perfect is to change often.” While it’s likely that collectively as business owners, policy drivers, and industry experts, we will never absolutely perfect the task of ...

How to Use a SAST Scanner

The pressure is on for organizations to deploy applications faster than ever before. Users and clients are hungry for new, innovative and accessible technologies, and businesses continue to embrace digital transformation to keep up with user ...

COURT DOC: Russian National Arrested and Charged with Conspiring to Commit LockBit Ransomware Attacks Against U.S. and Foreign Businesses

The Justice Department today announced charges against a Russian national for his involvement in deploying numerous LockBit ransomware and other cyberattacks against victim computer systems in the United States, Asia, Europe, and Africa. The post ...

Russian National Arrested, Charged in US Over Role in LockBit Ransomware Attacks

The US charges Russian national Ruslan Magomedovich Astamirov over his alleged role in LockBit ransomware attacks. The post Russian National Arrested, Charged in US Over Role in LockBit Ransomware Attacks appeared first on SecurityWeek.

Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military

Russia-linked hacking group Gamaredon is infecting USB drives for lateral movement within compromised Ukrainian networks. The post Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military appeared first on ...

Virtana acquires OpsCruise to help users manage complex modern environments

Virtana acquired cloud observability platform, OpsCruise, a purpose-built cloud-native, and Kubernetes observability platform. OpsCruise’s solution empowers ITOps/DevOps/SRE teams to predict performance degradation and pinpoint its cause. ...

How MSPs Can Leverage the Intel vPro® and Kaseya VSA Integration

Managed service providers, systems integrators and other organizations reliant on managing distributed endpoints and workforces now have a huge opportunityRead More The post How MSPs Can Leverage the Intel vPro® and Kaseya VSA Integration ...

Photos: BSidesLjubljana 0x7E7

BSidesLjubljana 0x7E7 is taking place today at the Computer History Museum, and Help Net Security is on site. Here’s a look at the event featuring Solar Designer (Openwall), Boris Sieklik (MongoDB), Darko Kukovec (Infinum), and Daniel ...

Manufacturing Industry Cybersecurity Best Practices

Critical gaps in manufacturing industry cybersecurity, exposing organizations to regulatory pitfalls and downtime, need robust protection and team insight  Cybersecurity has become a crucial concern for the production sector, with manufacturing ...

Main Security Challenges of Cloud Computing

Explore the main security challenges of cloud computing and learn how to mitigate risks to safeguard your data and protect your business. The post Main Security Challenges of Cloud Computing appeared first on GuardRails. The post Main Security ...

Ransomware Group Starts Naming Victims of MOVEit Zero-Day Attacks

The Cl0p ransomware gang has listed more than two dozen victims of the MOVEit zero-day attack on its leak website. The post Ransomware Group Starts Naming Victims of MOVEit Zero-Day Attacks appeared first on SecurityWeek.

Web3 Security: Safeguarding Assets and Data Privacy

Introduction Technological advancements reshape daily life and redefine digital interactions. Among these technological swifts, Web3 Security has stood out as a game-changer. It is promising a decentralized future and revolutionizing how we ...

Red teaming can be the ground truth for CISOs and execs

This year, against the backdrop of attacks on everyone from healthcare institutions and schools to financial services organizations, as well as the introduction of legislation across the UK and EU to move security up the agenda, cybersecurity has ...

New infosec products of the week: June 16, 2023

Here’s a look at the most interesting products from the past week, featuring releases from NETSCOUT, Okta, Quantinuum, Seceon, and Zilla Security. Okta Device Access enables businesses to secure access to both devices and applications As part ...

Introducing the book: Visual Threat Intelligence

In this Help Net Security video interview, Thomas Roccia, Senior Security Researcher at Microsoft, discusses his new book – Visual Threat Intelligence. The book covers a wide range of topics, including: Threat intelligence fundamentals and ...