Application Security News and Articles


Fiddler Auditor: Open-source tool evaluates the robustness of large language models

Fiddler Auditor is an open-source tool designed to evaluate the robustness of Large Language Models (LLMs) and Natural Language Processing (NLP) models. LLMs can sometimes produce unwarranted content, potentially create hostile responses, and may ...

Cyber debt levels reach tipping point

The tension between difficult economic conditions and the pace of technology innovation, including the evolution of AI, is influencing the growth of identity-led cybersecurity exposure, according to CyberArk. The CyberArk’s report details ...

Small organizations outpace large enterprises in MFA adoption

The use of MFA has nearly doubled since 2020 and that phishing-resistant authenticators represent the best choice in terms of security and convenience for users, according to Okta. MFA authentication gains traction MFA authentication has steadily ...

What is a browser doing at Infosecurity Europe 2023?

What if the enterprise had complete control over the browser? What would it do for security, productivity, for work itself? Ari Yablok, Head Of Brand at Island, invites you to visit Island at Infosecurity Europe 2023 (Stand S75) to learn ...

GuardRails Joins AWS Partner Program

GuardRails is part of the Amazon Web Services (AWS) Partner Network (APN), which allows us to share our vision of DevSecOps with more enterprises. The post GuardRails Joins AWS Partner Program appeared first on GuardRails. The post GuardRails ...

BestinBAS Threat Researchers Discover Their 40th CVE

Comprising of an elite team of white-hat hackers that work with the global cybersecurity community, the SafeBreach Labs team constantly monitors the threat landscape, sources intelligence feeds, and conducts original research to uncover novel ...

Inclusivity Begins with Securing Identities

Entrust keeps the world moving safely by enabling secure identities, payments, and data. In the... The post Inclusivity Begins with Securing Identities appeared first on Entrust Blog. The post Inclusivity Begins with Securing Identities appeared ...

Microsoft June “Patch Tuesday” Addresses 73 Vulnerabilities

On June 13th, Microsoft released their June. 2023 Patch Tuesday Security Updates and revealed 73 CVEs and 22 other non-Microsoft CVEs, one of which is known to be exploited in the wild. The vulnerabilities affect popular platforms such as .Net ...

BSidesSF 2023 – Kyle Tobener, Emre Sağlam, Divya Dwarakanath, Arianna Willett, Katie Ledoux – Take The Helm: Guidance For Prospective Future CISOs

Our thanks to BSidesSF for publishing their presenter’s superlative BSidesSF 2023 content on the organizations’ YouTube channel. Permalink The post BSidesSF 2023 – Kyle Tobener, Emre Sağlam, Divya Dwarakanath, Arianna Willett, Katie ...

The Harmonization Effect: Transforming Your Cybersecurity Program to Transform Your Company

To establish a robust cyber program, companies must navigate the complexities of ever-changing cybersecurity frameworks and ensure scalability over time, but mapping frameworks is a notoriously difficult task – especially when more than one is ...

Diving into Digital Darkness: From Startup Birth to Patent-Proven

Netography has been issued two patents with broad claim coverage in our core focus area of creating a defense platform for cloud and on-prem networks. Co-founder Barrett Lyon writes more about the patents and Netography’s journey. The post ...

News alert: Cybersixgill introduces generative AI for Dark Web threat intelligence gathering

Tel Aviv, Israel – June 14, 2023 – Cybersixgill, the global cyber threat intelligence data provider, announced today Cybersixgill IQ, its new generative AI, representing a significant breakthrough in cyber threat intelligence (CTI). ...

Microsoft Outs New Russian APT Linked to Wiper Attacks in Ukraine

Microsoft is publicly exposing a Russian APT group that worked on destructive wiper malware attacks that hit organizations in Ukraine. The post Microsoft Outs New Russian APT Linked to Wiper Attacks in Ukraine appeared first on SecurityWeek.

Zilla Security introduces new suite of identity security SaaS solutions

Zilla Security announced Zilla Secure and Segregation of Duties (SOD), two SaaS solutions that enable enterprise-wide identity security for cloud-based applications and infrastructure, SaaS, and legacy applications. “Organizations today ...

Cyber Threat Detection: The Definitive Guide

In today’s interconnected world, cyber threats continue to rise, while traditional cybersecurity techniques are becoming less effective and costlier. Coupled with the challenges of hiring skilled cyber professionals, it is evident that ...

It’s Official – FedRAMP has moved to Rev. 5

As of May 30, 2023, FedRAMP has officially approved and adopted the new Rev. 5 baselines – aligning with the National Institute of Standards and Technology Special Publication 800-53 (NIST 800-53) Rev. 5 baselines that went into effect in ...

Absolute Software expands its SSE solution with Absolute Secure Web Gateway Service

Absolute Software has expanded its differentiated Security Service Edge (SSE) solution with the launch of the Absolute Secure Web Gateway Service. Optimized for hybrid and mobile work models, this new extended offering builds on existing ...

How to trust open source software: A conversation with OpenSSF’s Naveen Srinivasan

For software engineers to keep up with the pace of software delivery in the world of continuous delivery/continuous integration (CI/CD), they rely on open source codebases to meet deadlines and create a quality product. But while open source code ...

Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnarav – #246 — The Agile AI Consultant

via the respected Software Engineering expertise of Mikkel Noe-Nygaard as well as the lauded Software Engineering and Enterprise Agile Coaching talent of Luxshan Ratnarav at Comic Agilé! Permalink The post Comic Agilé – Mikkel ...

Your Personal Data Sold to US Intelligence Agencies

What Price 4th Amendment? Warrant not needed if info bought from brokers. The post Your Personal Data Sold to US Intelligence Agencies appeared first on Security Boulevard.