Application Security News and Articles


How to avoid shadow AI in your SOC

Samsung’s recent discovery that employees had uploaded sensitive code to ChatGPT should serve as a reminder for security leaders to tread carefully when it comes to integrating new artificial intelligence tools throughout their organizations. ...

Proactive Insider Risk Management | A Case for Technology Consolidation

It is often said that any insider risk program must have a technology component to be effective in today’s enterprise environment, and few would get an argument.  The technology stack is a combination of your eyes and your time machine, ...

CISO-level tips for securing corporate data in the cloud

The presence of each third-party application increases the potential for attacks, particularly when end users install them without proper oversight or approval. IT security teams face challenges in obtaining comprehensive knowledge about the apps ...

Navigating the quantum leap in cybersecurity

In this Help Net Security interview, we sit down with Dr. Atsushi Yamada, the newly appointed CEO of ISARA, a security solutions company specializing in creating quantum-safe cryptography. With over two decades of experience in cryptography and ...

6 ChatGPT risks for legal and compliance leaders

Legal and compliance leaders should address their organization’s exposure to six specific ChatGPT risks, and what guardrails to establish to ensure responsible enterprise use of generative AI tools, according to Gartner. “The output generated ...

Tackling the Rise of Generative Email Attacks: A Guide for Cybersecurity Professionals

Discover effective strategies to defend against generative email attacks in our comprehensive guide. Learn about the capabilities of modern language models, potential threats posed by generative text-based attacks, and proactive measures that ...

Empowering Security Operations in Japan: Swimlane’s New Tokyo Office

The post Empowering Security Operations in Japan: Swimlane’s New Tokyo Office appeared first on Low-Code Security Automation & SOAR Platform | Swimlane. The post Empowering Security Operations in Japan: Swimlane’s New Tokyo Office ...

SEC Cybersecurity Rules: How To Prepare For The Coming Changes Now

Cybersecurity risk management, strategy, governance and incident disclosure are a growing concern for investors and a top priority for the U.S. Securities and Exchange Commission (SEC). In 2022, publicly-traded companies were put on notice to ...

Enterprise considerations for implementing data encryption

Organizations are accelerating plans for data encryption, driven by increased security, privacy, and cloud workload protection requirements. However, there are a few different approaches to data encryption and enterprises must consider several ...

BianLian Ransomware Shifting Focus to Pure Data Extortion

The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI) and Australian Cyber Security Centre (ACSC) issued a joint cybersecurity advisory on BianLian ransomware, which has been targeting various critical ...

Top 3 Security Priorities from Workday DevCon 2023

Discover how to bolster security in your Workday platform and how to effectively build a Workday SaaS security program. The post Top 3 Security Priorities from Workday DevCon 2023 appeared first on AppOmni. The post Top 3 Security Priorities from ...

BSidesSF 2023 – David Tomaschik – Growing Your Skillset with Capture the Flag

Our thanks to BSidesSF for publishing their presenter’s superlative BSidesSF 2023 content on the organizations’ YouTube channel. Permalink The post BSidesSF 2023 – David Tomaschik – Growing Your Skillset with Capture the Flag ...

Contrast Secure Code Platform and free CodeSec vulnerability scanning tool make on-call support suck less | Code Patrol Podcast | Contrast Security

It was the week after Thanksgiving, around 1 a.m., and the company was suffering the equivalent of a heart attack in its order-processing queue.  The post Contrast Secure Code Platform and free CodeSec vulnerability scanning tool make on-call ...

Dell Launches Project Fort Zero Service to Accelerate Zero-Trust IT Shift

Dell Technologies today launched a Project Fort Zero cybersecurity services initiative that promises to make it simpler for organizations to transition to zero-trust IT environments. The initiative is based on a reference architecture defined by ...

Selling Value – Empowering MSPs to Drive Sales Through Customer Interactions

In the competitive world of cybersecurity, where every sale holds immense value, unlocking the secrets of what your customers want from their managed service provider (MSP) can be the turning point that helps you close deals instead of striking ...

Mikrotik Belatedly Patches RouterOS Flaw Exploited at Pwn2Own

MikroTik patches a major security defect in its RouterOS product a full five months after it was exploited at Pwn2Own Toronto. The post Mikrotik Belatedly Patches RouterOS Flaw Exploited at Pwn2Own appeared first on SecurityWeek.

Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign

A credential phishing campaign using the legitimate SuperMailer newsletter distribution app has doubled in size each month since January 2023. The post Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign appeared first on SecurityWeek.

We’re Bringing Threat Hunting Tools to Gartner Security & Risk Management Summit!

Introduction The world of cybersecurity is constantly evolving, and so are the tools and techniques that threat hunters use to stay ahead of malicious actors. That’s why Cyborg Security is excited to announce our participation in the Gartner ...

FOSS BloodHound 4.3.1 release

We are excited to share the release of BloodHound version 4.3.1. We have accepted a lot of pull requests made by BloodHound users for bug fixes and cool improvements in this release. We are super grateful for the continued support and ...

NETSCOUT introduces visibility and instrumentation for threat detection in 4G and 5G networks

NETSCOUT has introduced Arbor Sightline Mobile and MobileStream to answer mobile network operators’ (MNO) need for scalable, real-time visibility, detection, and mitigation of threats that can impact the performance and availability of 4G/5G ...