Application Security News and Articles


Cybersecurity Insights with Contrast CISO David Lindner | 6/9

Insight #1 " Treat AI-generated code as inaccurate and insecure from the start and make sure it goes through all the same security reviews as manually generated code."   Insight #2 " CISOs are moving to boards as most ...

Replace Barracuda ESG appliances, company urges

Barracuda Networks is urging customers running phyisical Email Security Gateway (ESG) appliances to replace them immediately, “regardless of patch version level.” Vulnerability identification and disclosure Barracuda has identified a ...

eSentire unveils SaaS-based network traffic disruption for AWS to reduce cloud-based threats

eSentire introduces MDR for Network on AWS offering, extending its proprietary, on-premises network software to AWS cloud environments as a SaaS-based solution. As organizations continue to scale in the cloud, more than half of network detections ...

API Security Reconnaissance As A Service using Noname Recon

Avord, a cybersecurity services and solutions organization based in the UK, is working with API security pioneer, Noname Security, to deliver API security reconnaissance as a service. The post API Security Reconnaissance As A Service using Noname ...

In Other News: AI Regulation, Layoffs, US Aerospace Attacks, Post-Quantum Encryption

Cybersecurity news that you may have missed this week: AI regulation, layoffs, US aerospace malware attacks, and post-quantum encryption. The post In Other News: AI Regulation, Layoffs, US Aerospace Attacks, Post-Quantum Encryption appeared ...

Kyndryl’s CSIRF service responds to detected security incidents

Kyndryl unveiled a Cybersecurity Incident Response and Forensics (CSIRF) service to help customers proactively prepare for and respond to threats by applying the latest threat intelligence and experience from Kyndryl’s deep domain security ...

BSidesSF 2023 – Eoin Wickens, Marta Janus – Sleeping With One AI Open: An Introduction to Attacks Against Artificial Intelligence and Machine Learning

Our thanks to BSidesSF for publishing their presenter’s superlative BSidesSF 2023 content on the organizations’ YouTube channel. Permalink The post BSidesSF 2023 – Eoin Wickens, Marta Janus – Sleeping With One AI Open: An ...

Guardz launches AI-powered Multilayered Phishing Protection to secure SMEs

Guardz has unveiled a new AI-powered Multilayered Phishing Protection solution to help small and medium-sized enterprises (SMEs) and managed service providers (MSPs) prevent phishing attacks before their security is compromised. The solution uses ...

Insight launches Insight Lens for GenAI

Insight Enterprises is launching a new service offering designed to help unlock the vast potential of generative AI to drive value to clients’ businesses. Insight Lens for GenAI builds on Insight’s deep capabilities in enterprise ...

From Shortage to Strength: Harnessing Automation and Algorithms to Overcome IT Security Staffing Challenges

The rapidly evolving digital landscape demands robust cybersecurity measures. However, the scarcity of skilled security professionals poses a significant challenge in the IT industry. To address this issue, organizations are turning to automation ...

Gigamon allows users to gain deep observability into security data with Amazon Security Lake integration

Gigamon announced that its Deep Observability Pipeline now delivers network-derived application metadata intelligence (AMI) into Amazon Security Lake from Amazon Web Services (AWS). Amazon Security Lake automatically centralizes an ...

Sentra Adds Tool for Redacting Generative AI Prompts

Sentra this week introduced a tool that automatically redacts personally identifiable information (PII) from prompts used to share data with either the ChatGPT or Google Bard generative artificial intelligence (AI) platform. Sentra CTO Ron Reiter ...

Verizon 2023 DBIR: Credential Leaks Continue To Be A Major Issue

Verizon's 2023 DBIR shows trends for incidents and breaches from the last year. Read our recap to see how credential leakage is helping malicious actors gain entry. The post Verizon 2023 DBIR: Credential Leaks Continue To Be A Major Issue ...

What is Self-Sovereign Identity and How Does it Benefit You?

Organizations predominately use centralized identity management systems to regulate how individuals access apps and websites. However, as we have witnessed recently, these centralized systems often make organizations vulnerable to large-scale ...

Breaking Into New Industries: How to Diversify Your Customer Base

Many managed service providers (MSPs) avoid specializing in several verticals, which could lead to a missed opportunity to grow theirRead More The post Breaking Into New Industries: How to Diversify Your Customer Base appeared first on ...

Blackpoint Raises $190 Million to Help MSPs Combat Cyber Threats

Blackpoint Cyber raises $190 million in a growth funding round led by Bain Capital Tech Opportunities. The post Blackpoint Raises $190 Million to Help MSPs Combat Cyber Threats appeared first on SecurityWeek.

Deepwatch partners with Lacework to provide customers with end-to-end cloud security solutions

Deepwatch announced a global strategic partnership with Lacework to offer organizations comprehensive and proactive security solutions. This strategic partnership combines Deepwatch’s MDR expertise with Lacework’s advanced cloud ...

Google Introduces SAIF, a Framework for Secure AI Development and Use

The Google SAIF (Secure AI Framework) is designed to provide a security framework or ecosystem for the development, use and protection of AI systems. The post Google Introduces SAIF, a Framework for Secure AI Development and Use appeared first on ...

‘Asylum Ambuscade’ Group Hit Thousands in Cybercrime, Espionage Campaigns

ESET has linked several cybercrime and espionage campaigns to a threat actor tracked as Asylum Ambuscade. The post ‘Asylum Ambuscade’ Group Hit Thousands in Cybercrime, Espionage Campaigns appeared first on SecurityWeek.

Identity Security a Top Priority as Threats Evolve

The need to secure digital identities is one of the biggest privacy and data issues facing organizations today, and with less than half of organizations (49%) proactively investing in securing identities, there is still a long way to go. These ...