Application Security News and Articles


Wiz partners with Contrast Security to provide real-time insights into potential security risks

As a launch partner for the Wiz Integrations (WIN) platform, ContrastContrast Security brings the power of the Contrast Secure Code Platform to WIN, so that customers can seamlessly integrate Contrast’s application security and protections ...

Three Reasons Why Your Email Security is Failing

Worldwide spending on security solutions and services is forecasted to be over $200 billion in 2023 and nearly $300 billion in 2026, yet we continue to see an increase in cyberattacks year after year. If organizations want to curb this trend, ...

How Ticket Scalping Impacts Asia’s Live Entertainment Industry

Asia’s booming live entertainment industry has recently been plagued by a growing problem of ticket scalping. The term refers to the act of purchasing live event tickets in bulk by individuals, often through the use of automation (aka bots), to ...

Hundreds of Thousands of eCommerce Sites Impacted by Critical Plugin Vulnerability

Hundreds of thousands of ecommerce sites are impacted by a critical vulnerability in the WooCommerce Stripe Payment Gateway plugin. The post Hundreds of Thousands of eCommerce Sites Impacted by Critical Plugin Vulnerability appeared first on ...

Sycope 2.3 detects network problems and identifies security threats

Sycope is introducing version 2.3 of its network monitoring and security tool. The solution is based on real-time flow analysis enriched with business context and supports companies in securing performance and improving IT security. The new ...

Essential Data Loss Prevention Best Practices Every Firm Should Know

Are you following these critical data loss prevention best practices to protect your business? The post Essential Data Loss Prevention Best Practices Every Firm Should Know appeared first on Security Boulevard.

Kasada Secures Spot on 2023 Big50 Startup List

Cybersecurity Company Recognized for Its Innovation Challenging the Status Quo and Defending Enterprises Against Automated Threats and Online Fraud The post Kasada Secures Spot on 2023 Big50 Startup List appeared first on Security Boulevard.

Threat Intelligence Firm Silent Push Launches With $10 Million in Seed Funding

Detection-focused threat intelligence firm Silent Push, which maps out the entire internet every day, has launched with $10 million in seed funding. The post Threat Intelligence Firm Silent Push Launches With $10 Million in Seed Funding appeared ...

Eviden AIsaac Cyber Mesh helps enterprises detect security threats

Eviden, an Atos business, announces AIsaac Cyber Mesh, a next generation of cybersecurity detection and response, reinforced by AWS Security Data Lake and powered by generative AI technologies. AIsaac Cyber Mesh offers an advanced end-to-end ...

Insider Risk: Theft of Trade Secrets Nets Thief Six Months

An interesting case of insider risk wrapped up recently in the Federal District Court in Massachusetts when U.S. Senior District Court Judge William G. Young handed down a lenient sentence to Haoyang Yu. Yu, a former employee of semiconductor ...

Why you need a risk-first approach to Compliance | anecdotes

Risk and Compliance? Or maybe, Compliance and risk? The difference is not merely a semantic one, it is philosophical. Some GRC managers believe that risk assessments are just something you have to do in order to comply with certain frameworks. ...

Chrome 114 Update Patches Critical Vulnerability

Google has released a Chrome 114 security update to address five vulnerabilities, including a critical-severity bug in Autofill payments. The post Chrome 114 Update Patches Critical Vulnerability appeared first on SecurityWeek.

Switzerland under cyberattack

Swiss government websites are under DDoS attacks, but several ransomware gangs have also turned their sights on Swiss government organizations, cantonal governments, cities and companies in the last few months. Government sites under DDoS attacks ...

SAP Patches High-Severity Vulnerabilities With June 2023 Security Updates

SAP has released eight new security notes on June 2023 Security Patch Day, including two that address high-severity vulnerabilities. The post SAP Patches High-Severity Vulnerabilities With June 2023 Security Updates appeared first on SecurityWeek.

ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities

ICS Patch Tuesday: Siemens and Schneider Electric have published more than a dozen advisories addressing over 200 vulnerabilities. The post ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities appeared first on ...

Securing the Future with Unparalleled Cybersecurity Solutions

In today’s interconnected world, cybersecurity has become paramount for businesses of all sizes. With the ever-growing threat landscape, finding a reliable and effective cybersecurity partner is crucial. That’s where WeSecureApp emerges as ...

From our CTO: Introducing Agentless Runtime Monitoring 

At Rezilion, we believe that too much time is being spent on security – especially when it comes to software.  From our very beginning, we’ve focused on a mission to enable teams to spend less time fighting security fires and more time ...

Rezilion Launches Breakthrough Agentless Runtime Monitoring Solution for Vulnerability Management 

NEW YORK, June 14, 2023 – Rezilion, an automated software supply chain security platform, today announced the release of its Agentless Runtime Monitoring solution. This new capability allows user connection and access to Rezilion’s full ...

Spotify Fined $5 Million for Breaching EU Data Rules

Music streaming giant Spotify was fined 58 million kronor ($5.4 million) for not properly informing users on how data it collected on them was being used, Swedish authorities said. The post Spotify Fined $5 Million for Breaching EU Data Rules ...

Zscaler unveils a set of security solutions designed to leverage the full potential of generative AI

Zscaler has unveiled a set of security solutions designed for IT and security teams to leverage the full potential of generative AI while preserving the safety of enterprises’ intellectual property and their customers’ data. By employing its ...