Application Security News and Articles


Adapting to NIS2: Maximizing Security with PKI and Certificate Management

The transition to NIS2 represents a crucial step in enhancing the security and resilience of critical infrastructures across the EU. The post Adapting to NIS2: Maximizing Security with PKI and Certificate Management appeared first on ...

BSidesSF 2023 – Alethe Denis – HALT AND CATCH FIRE: Social Engineering CTFs for fun to a job as a Professional Red Team Social Engineer

Our thanks to BSidesSF for publishing their presenter’s superlative BSidesSF 2023 content on the organizations’ YouTube channel. Permalink The post BSidesSF 2023 – Alethe Denis – HALT AND CATCH FIRE: Social Engineering CTFs for ...

Randall Munroe’s XKCD ‘Iceberg’

via the comic artistry and dry wit of Randall Munroe, resident at XKCD! Permalink The post Randall Munroe’s XKCD ‘Iceberg’ appeared first on Security Boulevard.

A Holistic Approach to SaaS Security: Threat Detection and Configuration Management For Stronger Defense

See how a holistic SaaS security approach fusing threat detection and automation capabilities provides total SaaS app protection. The post A Holistic Approach to SaaS Security: Threat Detection and Configuration Management For Stronger Defense ...

Self-attestation: What software teams need to know

Software companies supplying the U.S. federal government must begin attesting to the security of critical software by June 11 — and more deadlines for attesting to the security of a wider range of software are approaching in the months ...

MY TAKE: Will companies now heed attackers’ ultimatum in the MOVEit-Zellis supply chain hack?

The cybersecurity community is waiting for the next shoe to drop in the wake of the audacious MOVEit-Zellis hack orchestrated by the infamous Russian hacking collective, Clop. Related: SolarWinds-style supply chain attacks on the rise Clop ...

VMware’s DEX solution empowers IT teams with data-driven insights

VMware has unveiled four enhancements to further its digital employee experience (DEX) solution: the general availability of DEX for 3rd party managed devices, DEX for VMware Horizon, AI-driven Guided RCA, as well as the intent to expand ...

National Cybersecurity Strategy: Disrupting and Dismantling Threat Actors Will Not Come Easy

Continuing a review of the new National Cybersecurity Strategy, today I look at the second pillar, Disrupt and Dismantle Threat Actors. It’s heavy on collaboration, information sharing, and integrated response, and lays out five objectives ...

Spotlight Report: Authentication UX Has Widespread Business Impact

Introduction The post Spotlight Report: Authentication UX Has Widespread Business Impact appeared first on Security Boulevard.

Erik Prusch joins ISACA as CEO

Erik Prusch will join ISACA as its new CEO. Based in Washington state, Prusch brings significant tech and leadership experience as a CEO and board director to the organization. “This is an exciting time for ISACA as we’ve expanded globally, ...

New BlackFog research: 61% of SMBs were victims of a cyberattack in the last year

BlackFog research highlights how SMBs were victims of cyberattack in the last year and the importance of having a trusted partner. The post New BlackFog research: 61% of SMBs were victims of a cyberattack in the last year appeared first on ...

TuxCare SecureChain for Java strengthens software supply chain security

TuxCare launched SecureChain for Java service to bolster software supply chain security via continuously secured and free repository service. With 76% of open source code used in the commercial code bases, threat groups see it as an ever-growing ...

BSidesSF 2023 – Dr. Amit Elazari – Keynote: Hacking Policy and Policy Hacking – A Hacker Guide to the Universe of Cyber Policy

Our thanks to BSidesSF for publishing their presenter’s superlative BSidesSF 2023 content on the organizations’ YouTube channel. Permalink The post BSidesSF 2023 – Dr. Amit Elazari – Keynote: Hacking Policy and Policy Hacking ...

What a Mess: Barracuda Swaps Countless Appliances — Malware Can’t be Removed

ESG FAIL: Patching alone won’t cut it. The post What a Mess: Barracuda Swaps Countless Appliances — Malware Can’t be Removed appeared first on Security Boulevard.

The Biggest Risks to the Software Supply Chain

Software supply chain risks is an increasingly hot topic because attention to the supply chain has grown in recent years.  Its importance has naturally attracted the attention of hackers, so protecting the software supply chain is paramount. A ...

Insider Risk in the Financial Sector – Case Study

Introduction The financial sector, the powerhouse of our economy, is increasingly becoming a prime target for cyber threats. With a diverse range of organisations varying in size, presence, and services, the sector is entrusted with highly ...

Techno Security & Digital Forensics Conference East 2023 – A community defending against ever evolving threats

For the 23rd year, Techno Security & Digital Forensics Conference East brought practitioners from law enforcement, academia, and security industry pros to learn from each over. The post Techno Security & Digital Forensics Conference East ...

Darktrace unveils AI models that help protect data privacy and intellectual property

In response to growing use of generative AI tools, Darktrace launched a new risk and compliance models to help its 8,400 customers around the world address the increasing risk of IP loss and data leakage. These new risk and compliance models for ...

The Answer to Optimizing Your Security Infrastructure? Consolidation

As the old saying goes, “Sometimes less is more”— an approach that rings true for security, too. But heightened concerns around security often lead businesses to overcomplicate and invest in too many solutions. With an overload of ...

Cybercrime Predictions from an Industry Veteran: Dan Schaupner

Predicting the future of cybercrime has never been easy. The post Cybercrime Predictions from an Industry Veteran: Dan Schaupner appeared first on Security Boulevard.