Application Security News and Articles


Western Digital store offline due to March breach

The Western Digital online store is offline as a result of the “network security incident” it suffered in March 2023. Users have been notified On May 5, 2023, the company emailed its customers to say that an unauthorized party ...

Western Digital Confirms Ransomware Group Stole Customer Information

Western Digital has confirmed that a ransomware group has stolen customer and other information from its systems. The post Western Digital Confirms Ransomware Group Stole Customer Information appeared first on SecurityWeek.

GUEST ESSAY: How to close the skills gap by dipping into hidden pools of cybersecurity talent

There is no doubt there is a constant and growing concern amongst CEO’s, and particularly CISO’s, concerning the hiring of the cybersecurity talent their organizations require to safeguard against cyberattacks. According to Cybersecurity ...

The Role of WAAP Platforms in the CI/CD Pipeline

A WAAP solution could play a critical role in CI/CD process. It helps protect apps and APIs from threats throughout the entire SDLC. The post The Role of WAAP Platforms in the CI/CD Pipeline appeared first on Indusface. The post The Role of WAAP ...

The WhatsApp of secure computation

A key term when discussing encryption these days is end-to-end (E2E) encryption. The idea with E2E encryption is that data is kept confidential between the encryptor and the intended receiver. This might seem an obvious requirement, but not all ...

The true numbers behind deepfake fraud

The rise of AI-generated identity fraud like deepfakes is alarming, with 37% of organizations experiencing voice fraud and 29% falling victim to deepfake videos, according to a survey by Regula. In this Help Net Security video, Henry Patishman, ...

What Business Owners Can Learn From the AKPK Breach

Discover the lessons learned from the AKPK breach and how it can help business owners improve their cybersecurity measures. The post What Business Owners Can Learn From the AKPK Breach appeared first on GuardRails. The post What Business Owners ...

Your voice could be your biggest vulnerability

AI technology is fueling a rise in online voice scams, with just three seconds of audio required to clone a person’s voice, according to McAfee. McAfee surveyed 7,054 people from seven countries and found that a quarter of adults had previously ...

Juice Jacking Debunked, Photographer vs. AI Dataset, Google Authenticator Risks

In this episode we debunk the fearmongering surrounding “juice jacking,” a cyber attack where attackers steal data from devices that are charging via USB ports. Next, we dive into a case where a photographer tried to get his photos removed ...

The Role of DAST in Meeting Regulatory Compliance Standards

Discover how DAST plays a crucial role in meeting regulatory compliance standards and ensuring the security of your web applications. The post The Role of DAST in Meeting Regulatory Compliance Standards appeared first on GuardRails. The post The ...

Consumer skepticism is the biggest barrier to AI-driven personalization

Businesses worldwide are eagerly embracing the potential for AI to provide personalized customer experiences, but customers remain cynical, according to Twilio. This year’s report underscores the value of an AI-driven personalization strategy ...

Lessons from a 40-year-long automotive OEM leader

Paul Cha is a cyber and product security leader, serving as the VP of Cybersecurity at LG Electronics Vehicle component Solutions. Paul held critical positions at Synopsis, Ford Motor Company, and Samsung before joining LG. He found his way to ...

USENIX Enigma 2023 – Marcus Botacin – ‘Why Is Our Security Research Failing? Five Practices to Change!’

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Enigma 2023 – Marcus Botacin – ‘Why Is Our Security ...

Importance of DevSecOps in your Software Project and How to do it

Before we jump into how to implement DevSecOps in your Project. First question in your mind will be,Continue reading on Medium »

Securing the Grid: How Balbix Transformed a US Utility Company’s Cybersecurity Posture

Cybersecurity for Utility companies is a complex endeavor: Electric utility companies around the world are progressively adopting smart grid technologies to enhance their operations. As these advanced systems evolve, they bring with them the ...

Cloud, Workforce, Cyber and AI: NASCIO Midyear 2023

The National Association of State Chief Information Officers held their 2023 Midyear Conference in National Harbor, Md., this past week. Here are some top takeaways from the program and state leadership conversations.    The post Cloud, ...

Week in review: Fake ChatGPT desktop client steals data, Patch Tuesday forecast

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Former Uber CSO avoids prison for concealing data breach Joe Sullivan, the former Uber CSO who has been convicted last year for attempting to ...

USENIX Enigma 2023 – Justin Brookman – ‘What Public Interest AI Auditors Can Learn From Security Testing: Legislative And Practical Wins’

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Enigma 2023 – Justin Brookman – ‘What Public Interest ...

How to Migrate Your WordPress Website: A Comprehensive Guide

While operating a WordPress site, one must come across switching hosting providers. And it can be due to several reasons, but saving money and availing better bandwidth and storage are the top among them. WordPress site migration is a complex ...

CACI collaborates with Torchlight to provide secure access to dark web for SOF customers

CACI announced a strategic partnership to provide the DarkPursuit capability within the Torchlight Catalyst platform. This partnership will provide Torchlight customers, mainly Special Operations Forces (SOF), with safe and secure access to ...